In the Linux kernel, the following vulnerability has been resolved:
media: gspca: cpia1: shift-out-of-bounds in set_flicker
Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int'
When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-tools | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-develUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-64kb | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-oracle-5.4Upgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-nvidia-tegraUpgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iotg-5.15Upgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-iotUpgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-nvidia-6.5Upgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-gkeop-5.15Upgrade linux-azure-fdeUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-azure-fde-5.15Upgrade linux-awsUpgrade linux | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub