CVE-2024-50290

A flaw was found in the Linux kernel's media subsystem, specifically within the cx24116 driver. This vulnerability occurs when reading Signal-to-Noise Ratio (SNR) registers, where a failure can result in a negative value being returned. This negative value then causes an integer underflow during SNR calculations, which could lead to unexpected system behavior or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the cx24116 kernel module from loading if the associated hardware is not in use. Create a file named /etc/modprobe.d/blacklist-cx24116.conf with the following content:

blacklist cx24116

After creating the file, regenerate the initramfs to ensure the blacklist is applied during boot:

For Red Hat Enterprise Linux 8 and 9:

sudo dracut -f -v

For Fedora:

sudo dracut -f -v

A system reboot is required for the changes to take effect. This mitigation may impact functionality if the cx24116 media device is actively used.