OSV - Open Source Vulnerabilities

CVE-2024-50287

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50287
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50287.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50287
Downstream
Related
Published
2024-11-19T01:30:31Z
Modified
2026-08-12T03:30:37Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
media: v4l2-tpg: prevent the risk of a division by zero
Details

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-tpg: prevent the risk of a division by zero

As reported by Coverity, the logic at tpg_precalculate_line() blindly rescales the buffer even when scaled_witdh is equal to zero. If this ever happens, this will cause a division by zero.

Instead, add a WARN_ON_ONCE() to trigger such cases and return without doing any precalculation.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50287.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
63881df94d3ecbb0deafa0b77da62ff2f32961c4
Fixed
e3c36d0bde309f690ed1f9cd5f7e63b3a513f94a
Fixed
0bfc6e38ee2250f0503d96f1a1de441c31d88715
Fixed
054931ca3cfcb8e8fa036e887d6f379942b02565
Fixed
a749c15dccc58d9cbad9cd23bd8ab4b5fa96cf47
Fixed
c63c30c9d9f2c8de34b16cd2b8400240533b914e
Fixed
2d0f01aa602fd15a805771bdf3f4d9a9b4df7f47
Fixed
0cdb42ba0b28f548c1a4e86bb8489dba0d78fc21
Fixed
e6a3ea83fbe15d4818d01804e904cbb0e64e543b

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50287.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.18.0
Fixed
4.19.324
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.286
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.230
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.172
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.117
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.61
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.8

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50287.json"