CVE-2024-35830

media: tc358743: register v4l2 async device only after successful setup

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

media: tc358743: register v4l2 async device only after successful setup

Ensure the device has been setup correctly before registering the v4l2
async device, thus allowing userspace to access.

En el kernel de Linux, se resolvió la siguiente vulnerabilidad: media: tc358743: registre el dispositivo asíncrono v4l2 solo después de una configuración exitosa Asegúrese de que el dispositivo se haya configurado correctamente antes de registrar el dispositivo asíncrono v4l2, permitiendo así el acceso al espacio de usuario.

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-05-17 CVE Reserved
2024-05-17 CVE Published
2024-05-18 EPSS Updated
2024-09-11 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (12)

URL	Tag	Source
https://git.kernel.org/stable/c/4c5211a100399c3823563193dd881dcb3b7d24fc	Vuln. Introduced
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/17c2650de14842c25c569cbb2126c421489a3a24	2024-03-26
https://git.kernel.org/stable/c/daf21394f9898fb9f0698c3e50de08132d2164e6	2024-03-26
https://git.kernel.org/stable/c/610f20e5cf35ca9c0992693cae0dd8643ce932e7	2024-03-26
https://git.kernel.org/stable/c/b8505a1aee8f1edc9d16d72ae09c93de086e2a1a	2024-03-26
https://git.kernel.org/stable/c/8ba8db9786b55047df5ad3db3e01dd886687a77d	2024-03-26
https://git.kernel.org/stable/c/edbb3226c985469a2f8eb69885055c9f5550f468	2024-03-26
https://git.kernel.org/stable/c/c915c46a25c3efb084c4f5e69a053d7f7a635496	2024-03-26
https://git.kernel.org/stable/c/4f1490a5d7a0472ee5d9f36547bc4ba46be755c7	2024-03-26
https://git.kernel.org/stable/c/87399f1ff92203d65f1febf5919429f4bb613a02	2024-01-22

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 4.19.311 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 4.19.311"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 5.4.273 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 5.4.273"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 5.10.214 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 5.10.214"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 5.15.153 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 5.15.153"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 6.1.83 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 6.1.83"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 6.6.23 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 6.6.23"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 6.7.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 6.7.11"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 6.8.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 6.8.2"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.3 < 6.9 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.3 < 6.9"		en		Affected