CVE-2024-50290

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50290
In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/127b9076baeadd734b18ddc8f2cd93b47d5a3ea3 Patch
https://git.kernel.org/stable/c/3a1ed994d9454132354b860321414955da289929 Patch
https://git.kernel.org/stable/c/576a307a7650bd544fbb24df801b9b7863b85e2f Patch
https://git.kernel.org/stable/c/828047c70f4716fde4b1316f7b610e97a4e83824 Patch
https://git.kernel.org/stable/c/83c152b55d88cbf6fc4685941fcb31333986774d Patch
https://git.kernel.org/stable/c/cad97ca8cfd43a78a19b59949f33e3563d369247 Patch
https://git.kernel.org/stable/c/f2b4f277c41db8d548f38f1dd091bbdf6a5acb07 Patch
https://git.kernel.org/stable/c/fbefe31e4598cdb0889eee2e74c995b2212efb08 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
History

03 Nov 2025, 23:17

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

03 Nov 2025, 21:17

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html -

19 Sep 2025, 18:51

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE CWE-191
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/127b9076baeadd734b18ddc8f2cd93b47d5a3ea3 - () https://git.kernel.org/stable/c/127b9076baeadd734b18ddc8f2cd93b47d5a3ea3 - Patch
References () https://git.kernel.org/stable/c/3a1ed994d9454132354b860321414955da289929 - () https://git.kernel.org/stable/c/3a1ed994d9454132354b860321414955da289929 - Patch
References () https://git.kernel.org/stable/c/576a307a7650bd544fbb24df801b9b7863b85e2f - () https://git.kernel.org/stable/c/576a307a7650bd544fbb24df801b9b7863b85e2f - Patch
References () https://git.kernel.org/stable/c/828047c70f4716fde4b1316f7b610e97a4e83824 - () https://git.kernel.org/stable/c/828047c70f4716fde4b1316f7b610e97a4e83824 - Patch
References () https://git.kernel.org/stable/c/83c152b55d88cbf6fc4685941fcb31333986774d - () https://git.kernel.org/stable/c/83c152b55d88cbf6fc4685941fcb31333986774d - Patch
References () https://git.kernel.org/stable/c/cad97ca8cfd43a78a19b59949f33e3563d369247 - () https://git.kernel.org/stable/c/cad97ca8cfd43a78a19b59949f33e3563d369247 - Patch
References () https://git.kernel.org/stable/c/f2b4f277c41db8d548f38f1dd091bbdf6a5acb07 - () https://git.kernel.org/stable/c/f2b4f277c41db8d548f38f1dd091bbdf6a5acb07 - Patch
References () https://git.kernel.org/stable/c/fbefe31e4598cdb0889eee2e74c995b2212efb08 - () https://git.kernel.org/stable/c/fbefe31e4598cdb0889eee2e74c995b2212efb08 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

19 Nov 2024, 21:57

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: cx24116: evitar desbordamientos en el cálculo de SNR según lo informado por Coverity, si falla la lectura de registros SNR, se devolverá un número negativo, lo que provocará un desbordamiento al leer registros SNR. Evitar eso.

19 Nov 2024, 02:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-19 02:16

Updated : 2025-11-03 23:17

NVD link : CVE-2024-50290

Mitre link : CVE-2024-50290

CVE.ORG link : CVE-2024-50290

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)