CVE-2024-35830

CVE-2024-35830

High · published May 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: tc358743: register v4l2 async device only after successful setup

Ensure the device has been setup correctly before registering the v4l2

async device, thus allowing userspace to access.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Published
2024-05-17T18:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 4.3, < 4.19.3114.19.311
linux/linux_kernel≥ 4.20, < 5.4.2735.4.273
linux/linux_kernel≥ 5.5, < 5.10.2145.10.214
linux/linux_kernel≥ 5.11, < 5.15.1535.15.153
linux/linux_kernel≥ 5.16, < 6.1.836.1.83
linux/linux_kernel≥ 6.2, < 6.6.236.6.23
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
linux/linux_kernel≥ 6.8, < 6.8.26.8.2
debian/debian_linuxall versions—
References (21)
https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 17 MAY 13:41Z
    media: tc358743: register v4l2 async device only after successful setup
    cvelistv5