CVE-2024-50289
MEDIUM severity · CVSS 5.5
5.5CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110_ca.c:270 dvb_ca_ioctl() warn: potential spectre issue 'av7110->ci_slot' [w] (local cap) There is a spectre-related vulnerability at the code. Fix it.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/458ea1c0be991573ec436aa0afa23baacfae101a ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/458ea1c0be991573ec436aa0afa23baacfae101aPatch
- https://git.kernel.org/stable/c/f3927206c478bd249c225414f7a751752a30e7b9Patch
- https://git.kernel.org/stable/c/0e58d7070eef16615e280d9b25d334b08e042b61
- https://git.kernel.org/stable/c/8567e451158fc75b633c37a5b15bb40a954ec554