CVE-2024-27075

media: dvb-frontends: avoid stack overflow warnings with clang

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: dvb-frontends: avoid stack overflow warnings with clang

A previous patch worked around a KASAN issue in stv0367, now a similar

problem showed up with clang:

drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than]

1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe)

Rework the stv0367_writereg() function to be simpler and mark both

register access functions as noinline_for_stack so the temporary

i2c_msg structures do not get duplicated on the stack when KASAN_STACK

is enabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Published
2024-05-01T13:04Z
EPSS history
Timeline
  • 01 MAY 13:04Z
    media: dvb-frontends: avoid stack overflow warnings with clang
    cvelistv5