VDB

CISA-2024-50287

CISA-2024-50287 PUBLISHED CVSS 5.5 MEDIUM

Reported by Linux · Published November 19, 2024

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: prevent the risk of a division by zero As reported by Coverity, the logic at tpg_precalculate_line() blindly rescales the buffer even when scaled_witdh is equal to zero. If this ever happens, this will cause a division by zero. Instead, add a WARN_ON_ONCE() to trigger such cases and return without doing any precalculation.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4, 63881df94d3ecbb0deafa0b77da62ff2f32961c4, 63881df94d3ecbb0deafa0b77da62ff2f32961c4
LinuxLinux3.18, 0, 4.19.324
linuxlinux_kernel3.18, 3.18, 3.18
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4, 63881df94d3ecbb0deafa0b77da62ff2f32961c4, 63881df94d3ecbb0deafa0b77da62ff2f32961c4

Timeline

  • Nov 19, 2024 CVE Published
  • Oct 1, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›