CVE - CVE-2024-47697

CVE-ID
CVE-2024-47697	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in rtl2830_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->filters is a 32-bit value, so set_bit and clear_bit functions should only operate on indices from 0 to 31. If index is 32, it will attempt to access a non-existent 33rd bit, leading to out-of-bounds access. Change the boundary check from index > 32 to index >= 32 to resolve this issue.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/042b101d7bf70616c4967c286ffa6fcca65babfb URL:https://git.kernel.org/stable/c/042b101d7bf70616c4967c286ffa6fcca65babfb MISC:https://git.kernel.org/stable/c/3dba83d3c81de1368d15a39f22df7b53e306052f URL:https://git.kernel.org/stable/c/3dba83d3c81de1368d15a39f22df7b53e306052f MISC:https://git.kernel.org/stable/c/46d7ebfe6a75a454a5fa28604f0ef1491f9d8d14 URL:https://git.kernel.org/stable/c/46d7ebfe6a75a454a5fa28604f0ef1491f9d8d14 MISC:https://git.kernel.org/stable/c/58f31be7dfbc0c84a6497ad51924949cf64b86a2 URL:https://git.kernel.org/stable/c/58f31be7dfbc0c84a6497ad51924949cf64b86a2 MISC:https://git.kernel.org/stable/c/7fd6aae7e53b94f4035b1bfce28b8dfa0d0ae470 URL:https://git.kernel.org/stable/c/7fd6aae7e53b94f4035b1bfce28b8dfa0d0ae470 MISC:https://git.kernel.org/stable/c/86d920d2600c3a48efc2775c1666c1017eec6956 URL:https://git.kernel.org/stable/c/86d920d2600c3a48efc2775c1666c1017eec6956 MISC:https://git.kernel.org/stable/c/badbd736e6649c4e6d7b4ff7e2b9857acfa9ea94 URL:https://git.kernel.org/stable/c/badbd736e6649c4e6d7b4ff7e2b9857acfa9ea94
Assigning CNA
kernel.org
Date Record Created
20240930	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240930)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)