In the Linux kernel, the following vulnerability has been resolved:
media: gspca: cpia1: shift-out-of-bounds in set_flicker
Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int'
When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-devel | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade perf | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-azure-baseUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-ibm-5.15Upgrade linux-aws-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-gcp-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-gcp-5.15Upgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-oracleUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-nvidia-tegraUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-azure-fde-5.15Upgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linuxUpgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-iotUpgrade linux-nvidia-6.5Upgrade linux-awsUpgrade linux-lowlatencyUpgrade linux-hwe-5.15Upgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-gkeop-5.15Upgrade linux-azure-5.4Upgrade linux-ibm-5.4Upgrade linux-raspi | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub