CVE-2024-50291

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: dvb-core: add missing buffer index check

dvb_vb2_expbuf() didn't check if the given buffer index was for a valid buffer. Add this check.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-129

Affected software

VendorProductVersions
LinuxLinux>= 7dc866df40127dceac9ba83ae16c0c11e7d1666f, < 721c37af0355cc0b540909c57fd7930dc99c72d8; >= 7dc866df40127dceac9ba83ae16c0c11e7d1666f, < fa88dc7db176c79b50adb132a56120a1d4d9d18b
LinuxLinux6.8

References

Timeline

Published
Nov 19, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-502925.5In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove CVE-2024-502937.8In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in __smc_create() Thanks tCVE-2024-502944.7In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborteCVE-2024-502955.5In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unmap_single The ndev-CVE-2024-502965.5In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling driver When the driver iCVE-2024-502974.7In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine startsCVE-2024-502985.5In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In the previous implemeCVE-2024-502995.5In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validationCVE-2024-50303.8The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attCVE-2024-503005.5In the Linux kernel, the following vulnerability has been resolved: regulator: rtq2208: Fix uninitialized use of regulator_config Fix rtq2CVE-2024-503017.1In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN repCVE-2024-503025.5In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer i
CVE-2024-50291: Medium severity, CVSS 5.5 | Vulnix