In the Linux kernel, the following vulnerability has been resolved:
media: av7110: fix a spectre vulnerability
As warned by smatch: drivers/staging/media/av7110/av7110ca.c:270 dvbcaioctl() warn: potential spectre issue 'av7110->cislot' [w] (local cap)
There is a spectre-related vulnerability at the code. Fix it.
[
{
"digest": {
"function_hash": "86873900625661185956169434213595041118",
"length": 564.0
},
"target": {
"file": "drivers/staging/media/av7110/av7110_ca.c",
"function": "CI_handle"
},
"signature_version": "v1",
"id": "CVE-2024-50289-412bbaf6",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3927206c478bd249c225414f7a751752a30e7b9",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"27517559838384546078602542308754133543",
"9442267643245077924187343463913135838",
"124296692108549333380200007926309831390",
"157764931223003207061874089334718662624",
"311490806498646101169625049957450758140",
"327070650535763671899289775756503432566",
"67736917495110326512169315111198408677",
"220823205217916858443365227340529910449",
"333641188501740392384012834755309140047",
"96941527374297075318746300942365519659",
"242413733140682646940011287293998709737",
"261178226948213028392730352591205206482",
"96436973895068693515398637053627328129",
"264047164058007129990946124267495512221",
"339326206975971168288109918914707839541",
"276479911458011819360471583228166816187",
"227000442668063769579789696190535653768",
"52757630586036122269832218781192364845",
"162456664689859127690229042051240804913",
"112366177071279103154452363712935718466",
"81795567971477677032004675045200003529",
"26077092865164116735822101563173829577",
"279215597715056977474550521518305673405",
"54778169139302653245418636828908240314",
"137826448858106587939134896985773045202",
"39131552823988754045122920029328895770",
"165020738110139442862664785180214234734",
"282181916662429912906861967050623353338",
"161182524717979690493947992290130363137",
"226486612146585548194303231491833030755",
"109624073473571735434880197926452622566",
"152635850104347301935736666703694050369"
]
},
"target": {
"file": "drivers/staging/media/av7110/av7110_ca.c"
},
"signature_version": "v1",
"id": "CVE-2024-50289-7a6cc879",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3927206c478bd249c225414f7a751752a30e7b9",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "120123533660825443184535461821045165895",
"length": 1781.0
},
"target": {
"file": "drivers/staging/media/av7110/av7110_ca.c",
"function": "dvb_ca_ioctl"
},
"signature_version": "v1",
"id": "CVE-2024-50289-8c52e405",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@458ea1c0be991573ec436aa0afa23baacfae101a",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"39333824142861138238520807842916500828",
"311674954429715734994052676833390653134",
"138751526624514653708326815053080545737",
"150062251573201413098810681095261792875",
"197125477912603143238224964268733929054",
"78829438632514441761848263802361318431",
"298962894691365572305235247108196700869"
]
},
"target": {
"file": "drivers/staging/media/av7110/av7110.h"
},
"signature_version": "v1",
"id": "CVE-2024-50289-98665224",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3927206c478bd249c225414f7a751752a30e7b9",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "86873900625661185956169434213595041118",
"length": 564.0
},
"target": {
"file": "drivers/staging/media/av7110/av7110_ca.c",
"function": "CI_handle"
},
"signature_version": "v1",
"id": "CVE-2024-50289-9a0adc67",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@458ea1c0be991573ec436aa0afa23baacfae101a",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"39333824142861138238520807842916500828",
"311674954429715734994052676833390653134",
"138751526624514653708326815053080545737",
"150062251573201413098810681095261792875",
"197125477912603143238224964268733929054",
"78829438632514441761848263802361318431",
"298962894691365572305235247108196700869"
]
},
"target": {
"file": "drivers/staging/media/av7110/av7110.h"
},
"signature_version": "v1",
"id": "CVE-2024-50289-becbf8f3",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@458ea1c0be991573ec436aa0afa23baacfae101a",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "120123533660825443184535461821045165895",
"length": 1781.0
},
"target": {
"file": "drivers/staging/media/av7110/av7110_ca.c",
"function": "dvb_ca_ioctl"
},
"signature_version": "v1",
"id": "CVE-2024-50289-c010c1f3",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3927206c478bd249c225414f7a751752a30e7b9",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"27517559838384546078602542308754133543",
"9442267643245077924187343463913135838",
"124296692108549333380200007926309831390",
"157764931223003207061874089334718662624",
"311490806498646101169625049957450758140",
"327070650535763671899289775756503432566",
"67736917495110326512169315111198408677",
"220823205217916858443365227340529910449",
"333641188501740392384012834755309140047",
"96941527374297075318746300942365519659",
"242413733140682646940011287293998709737",
"261178226948213028392730352591205206482",
"96436973895068693515398637053627328129",
"264047164058007129990946124267495512221",
"339326206975971168288109918914707839541",
"276479911458011819360471583228166816187",
"227000442668063769579789696190535653768",
"52757630586036122269832218781192364845",
"162456664689859127690229042051240804913",
"112366177071279103154452363712935718466",
"81795567971477677032004675045200003529",
"26077092865164116735822101563173829577",
"279215597715056977474550521518305673405",
"54778169139302653245418636828908240314",
"137826448858106587939134896985773045202",
"39131552823988754045122920029328895770",
"165020738110139442862664785180214234734",
"282181916662429912906861967050623353338",
"161182524717979690493947992290130363137",
"226486612146585548194303231491833030755",
"109624073473571735434880197926452622566",
"152635850104347301935736666703694050369"
]
},
"target": {
"file": "drivers/staging/media/av7110/av7110_ca.c"
},
"signature_version": "v1",
"id": "CVE-2024-50289-e1aa7114",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@458ea1c0be991573ec436aa0afa23baacfae101a",
"signature_type": "Line"
}
]