CVE-2024-47697

A flaw was found in the Linux kernel's rtl2830_pid_filter function within the dvb-frontends/rtl2830 driver. A local attacker with administrative (root) privileges could exploit this by providing an index value of 32 or greater, which would cause an out-of-bounds write. This could lead to memory corruption, potentially impacting system stability or integrity.

This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the rtl2830 kernel module from loading if the associated hardware is not in use. This can be achieved by blacklisting the module:

echo "install rtl2830 /bin/true" > /etc/modprobe.d/disable-rtl2830.conf

A system reboot is required for this change to take effect. This mitigation may impact functionality if the Realtek RTL2830 DVB-T demodulator is actively used.