CVE-2024-39481

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-39481
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-39481.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-39481
Downstream
Related
Published
2024-07-05T06:55:09Z
Modified
2025-10-17T07:54:30.377056Z
Summary
media: mc: Fix graph walk in media_pipeline_start
Details

In the Linux kernel, the following vulnerability has been resolved:

media: mc: Fix graph walk in mediapipelinestart

The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link.

Fix this by allowing the walk to proceed only for MEDIALNKFLDATALINK links.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ae219872834a32da88408a92a4b4745c11f5a7ce
Fixed
788fd0f11e45ae8d3a8ebbd3452a6e83f92db376
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ae219872834a32da88408a92a4b4745c11f5a7ce
Fixed
e80d9db99b7b6c697d8d952dfd25c3425cf61499
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ae219872834a32da88408a92a4b4745c11f5a7ce
Fixed
bee9440bc0b6b3b7432f7bfde28656262a3484a2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ae219872834a32da88408a92a4b4745c11f5a7ce
Fixed
8a9d420149c477e7c97fbd6453704e4612bdd3fa

Affected versions

v6.*

v6.0
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bee9440bc0b6b3b7432f7bfde28656262a3484a2",
        "id": "CVE-2024-39481-0f100c1a",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "275264846748403978398455974688083560223",
                "201722629592419323969175305152032284822",
                "269664791972900310827078686106915326730"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@788fd0f11e45ae8d3a8ebbd3452a6e83f92db376",
        "id": "CVE-2024-39481-3dd0dcf3",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "media_pipeline_explore_next_link",
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "function_hash": "198509150714511408173315960856290111144",
            "length": 1478.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e80d9db99b7b6c697d8d952dfd25c3425cf61499",
        "id": "CVE-2024-39481-831cc9d7",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "275264846748403978398455974688083560223",
                "201722629592419323969175305152032284822",
                "269664791972900310827078686106915326730"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e80d9db99b7b6c697d8d952dfd25c3425cf61499",
        "id": "CVE-2024-39481-9c4a792f",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "media_pipeline_explore_next_link",
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "function_hash": "198509150714511408173315960856290111144",
            "length": 1478.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@788fd0f11e45ae8d3a8ebbd3452a6e83f92db376",
        "id": "CVE-2024-39481-abb0c895",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "275264846748403978398455974688083560223",
                "201722629592419323969175305152032284822",
                "269664791972900310827078686106915326730"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a9d420149c477e7c97fbd6453704e4612bdd3fa",
        "id": "CVE-2024-39481-d1b33405",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "275264846748403978398455974688083560223",
                "201722629592419323969175305152032284822",
                "269664791972900310827078686106915326730"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bee9440bc0b6b3b7432f7bfde28656262a3484a2",
        "id": "CVE-2024-39481-df59045c",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "media_pipeline_explore_next_link",
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "function_hash": "198509150714511408173315960856290111144",
            "length": 1478.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a9d420149c477e7c97fbd6453704e4612bdd3fa",
        "id": "CVE-2024-39481-ef28a461",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "media_pipeline_explore_next_link",
            "file": "drivers/media/mc/mc-entity.c"
        },
        "digest": {
            "function_hash": "198509150714511408173315960856290111144",
            "length": 1478.0
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.94
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.34
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.5