NetSight
IP …
high7.3

CVE-2024-53061

In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2.

Impact

In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word = 0 assignment.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4 before 4.19.324
from 4.20 before 5.4.286
from 5.5 before 5.10.230
from 5.11 before 5.15.172
from 5.16 before 6.1.117
from 6.2 before 6.6.61

Weakness classification

CWE-191

References