In the Linux kernel, the following vulnerability has been resolved:
media: gspca: cpia1: shift-out-of-bounds in set_flicker
Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int'
When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-core | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-sourceUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extra | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-azure-5.15Upgrade linux-realtimeUpgrade linux-gkeUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-nvidiaUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-ibm-5.15Upgrade linux-oracle-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegraUpgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-nvidia-6.5Upgrade linux-aws-5.15Upgrade linuxUpgrade linux-gkeop-5.15Upgrade linux-iotUpgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fde-5.15Upgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-azure-fde | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub