CVE-2024-42223
AMD tda10048 Integer Overflow Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state->xtal_hz can be up to 16M, so it can overflow a 32 bit integer when multiplied by pll_mfactor. Create a new 64 bit variable to hold the calculations.
INFO
Published Date :
July 30, 2024, 8:15 a.m.
Last Modified :
Nov. 21, 2024, 9:33 a.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-42223.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-42223 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-42223 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/1121d8a5c6ed6b8fad492e43b63b386cb6a3a9d8 Added Reference https://git.kernel.org/stable/c/1663e2474e4d777187d749a5c90ae83232db32bd Added Reference https://git.kernel.org/stable/c/1aa1329a67cc214c3b7bd2a14d1301a795760b07 Added Reference https://git.kernel.org/stable/c/5c72587d024f087aecec0221eaff2fe850d856ce Added Reference https://git.kernel.org/stable/c/8167e4d7dc086d4f7ca7897dcff3827e4d22c99a Added Reference https://git.kernel.org/stable/c/8ac224e9371dc3c4eb666033e6b42d05cf5184a1 Added Reference https://git.kernel.org/stable/c/bd5620439959a7e02012588c724c6ff5143b80af Added Reference https://git.kernel.org/stable/c/e1ba22618758e95e09c9fd30c69ccce38edf94c0 -
Initial Analysis by [email protected]
Aug. 02, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/1121d8a5c6ed6b8fad492e43b63b386cb6a3a9d8 No Types Assigned https://git.kernel.org/stable/c/1121d8a5c6ed6b8fad492e43b63b386cb6a3a9d8 Patch Changed Reference Type https://git.kernel.org/stable/c/1663e2474e4d777187d749a5c90ae83232db32bd No Types Assigned https://git.kernel.org/stable/c/1663e2474e4d777187d749a5c90ae83232db32bd Patch Changed Reference Type https://git.kernel.org/stable/c/1aa1329a67cc214c3b7bd2a14d1301a795760b07 No Types Assigned https://git.kernel.org/stable/c/1aa1329a67cc214c3b7bd2a14d1301a795760b07 Patch Changed Reference Type https://git.kernel.org/stable/c/5c72587d024f087aecec0221eaff2fe850d856ce No Types Assigned https://git.kernel.org/stable/c/5c72587d024f087aecec0221eaff2fe850d856ce Patch Changed Reference Type https://git.kernel.org/stable/c/8167e4d7dc086d4f7ca7897dcff3827e4d22c99a No Types Assigned https://git.kernel.org/stable/c/8167e4d7dc086d4f7ca7897dcff3827e4d22c99a Patch Changed Reference Type https://git.kernel.org/stable/c/8ac224e9371dc3c4eb666033e6b42d05cf5184a1 No Types Assigned https://git.kernel.org/stable/c/8ac224e9371dc3c4eb666033e6b42d05cf5184a1 Patch Changed Reference Type https://git.kernel.org/stable/c/bd5620439959a7e02012588c724c6ff5143b80af No Types Assigned https://git.kernel.org/stable/c/bd5620439959a7e02012588c724c6ff5143b80af Patch Changed Reference Type https://git.kernel.org/stable/c/e1ba22618758e95e09c9fd30c69ccce38edf94c0 No Types Assigned https://git.kernel.org/stable/c/e1ba22618758e95e09c9fd30c69ccce38edf94c0 Patch Added CWE NIST CWE-190 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.19.318 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.280 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.222 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.163 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.98 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.39 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.9.9 -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jul. 30, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state->xtal_hz can be up to 16M, so it can overflow a 32 bit integer when multiplied by pll_mfactor. Create a new 64 bit variable to hold the calculations. Added Reference kernel.org https://git.kernel.org/stable/c/8167e4d7dc086d4f7ca7897dcff3827e4d22c99a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/5c72587d024f087aecec0221eaff2fe850d856ce [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e1ba22618758e95e09c9fd30c69ccce38edf94c0 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/bd5620439959a7e02012588c724c6ff5143b80af [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1663e2474e4d777187d749a5c90ae83232db32bd [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/8ac224e9371dc3c4eb666033e6b42d05cf5184a1 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1121d8a5c6ed6b8fad492e43b63b386cb6a3a9d8 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1aa1329a67cc214c3b7bd2a14d1301a795760b07 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-42223 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-42223
weaknesses.