CVE-2024-50291

In the Linux kernel, the following vulnerability has been resolved:

media: dvb-core: add missing buffer index check

dvb_vb2_expbuf() didn't check if the given buffer index was for a valid buffer. Add this check.

A flaw of low impact was found in the Linux kernel dvb-core (DVB video buffer) subsystem. The dvb_vb2_expbuf() function did not verify that a buffer index supplied by userspace referred to a valid allocated buffer before using it. A local user with access to a DVB video buffer device could exploit this by supplying an out-of-range buffer index, resulting in an out-of-bounds access in kernel memory. Red Hat and NIST assess this flaw as Moderate severity (CVSS 3.1 score 5.5, local attack vector, privileges required, integrity-only impact); the CVE.org record assigns 7.8 by assuming full compromise of confidentiality, integrity, and availability, which the specific missing index check does not establish.

The affected code was introduced upstream in Linux kernel 6.8 and is not present in the Red Hat Enterprise Linux 6, 7, 8, and 9 kernels (kernel and kernel-rt), nor in the Red Hat hosted OpenShift offerings, so those products are not affected. Within Red Hat's product scope, only Fedora (community kernel package) is listed as affected, and a fix for it is being pursued through the delegated community kernel maintenance stream.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.