CVE-2024-53081

Katalog CVE

CVSS 5.5 · Medium EPSS 0,23%

Kerentanan Integer Underflow (Wrap or Wraparound) pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bit integers with 32 bit ones, as reported by Coverity. Depending on the values of the variables, this may underflow. Fix it ensuring that both sides of the expression are u64.

Rincian

Terbit di NVD

19 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/438d3085ba5b8b5bfa5290faa594e577f6ac9aa7 patch
• https://git.kernel.org/stable/c/5e1523076acf95b4ea68d19b6f27e6891267cc24 patch
• https://git.kernel.org/stable/c/97ed0c0332d5525653668b31acf62ff1e6b50784 patch
• https://git.kernel.org/stable/c/a244b82d0ae60326901f2b50c15e3118298b7ecd patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html