In the Linux kernel, the following vulnerability has been resolved:
media: gspca: cpia1: shift-out-of-bounds in set_flicker
Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int'
When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernelUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade python3-perf | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade perfUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade python3-perf-debuginfo | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade dtb-appleUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade dtb-rockchip | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-azure-fdeUpgrade linux-lowlatencyUpgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-ibm-5.4Upgrade linux-nvidia-6.5Upgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-gkeop-5.15Upgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-iotUpgrade linux-gkeUpgrade linux-aws-fipsUpgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegraUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-hwe-5.4Upgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.15Upgrade linux-ibm-5.15Upgrade linux-nvidiaUpgrade linux-kvm | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub