CVE-2024-27075

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27075
In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previous patch worked around a KASAN issue in stv0367, now a similar problem showed up with clang: drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than] 1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe) Rework the stv0367_writereg() function to be simpler and mark both register access functions as noinline_for_stack so the temporary i2c_msg structures do not get duplicated on the stack when KASAN_STACK is enabled.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a Patch
https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119 Patch
https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 Patch
https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 Patch
https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f Patch
https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 Patch
https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 Patch
https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 Patch
https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 Patch
https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a Patch
https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119 Patch
https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 Patch
https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 Patch
https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f Patch
https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 Patch
https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 Patch
https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 Patch
https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Third Party Advisory Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Third Party Advisory Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

23 Dec 2025, 00:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a - () https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a - Patch
References () https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119 - () https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119 - Patch
References () https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 - () https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 - Patch
References () https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 - () https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 - Patch
References () https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f - () https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f - Patch
References () https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 - () https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 - Patch
References () https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 - () https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 - Patch
References () https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 - () https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 - Patch
References () https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 - () https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Third Party Advisory, Mailing List
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Third Party Advisory, Mailing List
CWE NVD-CWE-noinfo
First Time Linux
Debian
Debian debian Linux
Linux linux Kernel
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

21 Nov 2024, 09:03

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a - () https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a -
References () https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119 - () https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119 -
References () https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 - () https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 -
References () https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 - () https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 -
References () https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f - () https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f -
References () https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 - () https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 -
References () https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 - () https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 -
References () https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 - () https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 -
References () https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 - () https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 -

05 Nov 2024, 10:16

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 22:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: dvb-frontends: evita advertencias de desbordamiento de pila con clang. Un parche anterior solucionó un problema de KASAN en stv0367, ahora apareció un problema similar con clang: drivers/media/dvb- frontends/stv0367.c:1222:12: error: el tamaño del marco de pila (3624) excede el límite (2048) en 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than] 1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe) Vuelva a trabajar la función stv0367_writereg() para que sea más simple y marque ambas funciones de acceso a registros como noinline_for_stack para que las estructuras temporales i2c_msg no se dupliquen en la pila cuando KASAN_STACK esté habilitado.
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2025-12-23 00:39

NVD link : CVE-2024-27075

Mitre link : CVE-2024-27075

CVE.ORG link : CVE-2024-27075

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
NVD-CWE-noinfo