In the Linux kernel, the following vulnerability has been resolved:
media: gspca: cpia1: shift-out-of-bounds in set_flicker
Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int'
When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-devel | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perf | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade dtb-amlogicUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-rtUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-mediatek | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-nvidia-tegraUpgrade linux-hwe-5.4Upgrade linux-ibm-5.15Upgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-riscv-5.15Upgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-azureUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-azure-fde-5.15Upgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-nvidia-6.5Upgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-gkeop-5.15Upgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-aws-5.4Upgrade linux-iotUpgrade linux-ibm-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub