Description
In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma->SG_length' is 0. This value is later used to access 'dma->SGarray[dma->SG_length - 1]', which will cause out of bounds access. Add check to return early on invalid value. Adjust warnings accordingly. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
4551236b55e80b2c1720b10b77e9400118b2339e to < 38f72c7e7c6b55614f9407555fd5ce9d019b0fa4affected66c8a83bf1de2eb3eea4734c7eda22255a965f11 to < 81d0664bed91a858c7b50c263954b59d65f1b414affected1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to < 24062aa7407091dee3e45a8e8037df437e848718affected1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to < 3d8fd92939e21ff0d45100ab208f8124af79402aaffected1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to < c766065e8272085ea9c436414b7ddf1f12e7787baffected1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to < 629913d6d79508b166c66e07e4857e20233d85a9affected1b00b7335000c0e107f774cc8ee4d5340f824f28affected5.4.301 to < 5.5affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.103 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/38f72c7e7c6b55614f9407555fd5ce9d019b0fa4 ↗
- https://git.kernel.org/stable/c/81d0664bed91a858c7b50c263954b59d65f1b414 ↗
- https://git.kernel.org/stable/c/24062aa7407091dee3e45a8e8037df437e848718 ↗
- https://git.kernel.org/stable/c/3d8fd92939e21ff0d45100ab208f8124af79402a ↗
- https://git.kernel.org/stable/c/c766065e8272085ea9c436414b7ddf1f12e7787b ↗
- https://git.kernel.org/stable/c/629913d6d79508b166c66e07e4857e20233d85a9 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗