CVE-2024-53063

A flaw was found in the Linux kernel. A missing boundary check in the Digital Video Broadcasting (DVB) core subsystem allows for out-of-bounds memory access during device registration and open operations when dynamic minor numbers are disabled. A local user could exploit this vulnerability to cause memory corruption or a denial of service (DoS) through a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the dvb-core kernel module from being loaded:

1. Create a configuration file to blacklist and disable the module:

echo "install dvb-core /bin/true" >> /etc/modprobe.d/disable-dvb-core.conf

2. If the module is already loaded, remove it:

modprobe -r dvb-core

Caveats: Disabling this module prevents the system from supporting Digital Video Broadcasting (DVB) devices and TV tuner cards. If the module is actively in use by running processes, unloading it may fail and a system reboot will be required to ensure the module remains disabled.