CVE-2024-50288 media: vivid: fix buffer overwrite when using > 32 buffers
An out-of-bounds write in the Linux kernel vivid driver allows attackers to cause a crash or potentially execute code when using more than 32 buffers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50288?
CVE-2024-50288 is a high-severity memory corruption vulnerability in Linux kernel, published on 19 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
media: vivid: fix buffer overwrite when using > 32 buffers
The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a must_blank array that was still sized for 32 (VIDEO_MAX_FRAME). This caused an out-of-bounds write when using buffer indices >= 32.
Create a new define MAX_VID_CAP_BUFFERS that is used to access the must_blank array and set max_num_buffers for the video capture queue.
This solves a crash reported by:
https://bugzilla.kernel.org/show_bug.cgi?id=219258
Weakness: CWE-787
Which versions are affected by CVE-2024-50288?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50288?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-50288 being exploited?
There is no known exploitation of CVE-2024-50288 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-50288, DEBIAN-CVE-2024-50288, GHSA-c62v-4w5f-p7pw, UBUNTU-CVE-2024-50288.