Description

In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma->SG_length' is 0. This value is later used to access 'dma->SGarray[dma->SG_length - 1]', which will cause out of bounds access. Add check to return early on invalid value. Adjust warnings accordingly. Found by Linux Verification Center (linuxtesting.org) with SVACE.

INFO

Published Date :

2024-08-21T00:06:29.330Z

Last Modified :

2025-11-03T22:06:27.712Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-43877 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-43877.

URL Resource
https://git.kernel.org/stable/c/24062aa7407091dee3e45a8e8037df437e848718 cve-icon cve-icon
https://git.kernel.org/stable/c/38f72c7e7c6b55614f9407555fd5ce9d019b0fa4 cve-icon cve-icon
https://git.kernel.org/stable/c/3d8fd92939e21ff0d45100ab208f8124af79402a cve-icon cve-icon
https://git.kernel.org/stable/c/629913d6d79508b166c66e07e4857e20233d85a9 cve-icon cve-icon
https://git.kernel.org/stable/c/81d0664bed91a858c7b50c263954b59d65f1b414 cve-icon cve-icon
https://git.kernel.org/stable/c/c766065e8272085ea9c436414b7ddf1f12e7787b cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024082137-CVE-2024-43877-e8e4@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-43877 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-43877 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact