Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-53062

media: mgb4: protect driver against spectre

Description

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: protect driver against spectre Frequency range is set from sysfs via frequency_range_store(), being vulnerable to spectre, as reported by smatch: drivers/media/pci/mgb4/mgb4_cmt.c:231 mgb4_cmt_set_vin_freq_range() warn: potential spectre issue 'cmt_vals_in' [r] drivers/media/pci/mgb4/mgb4_cmt.c:238 mgb4_cmt_set_vin_freq_range() warn: possible spectre second half. 'reg_set' Fix it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0ab13674a9bd10514486cf1670d71dbd8afec421 to < e0bc90742bbd6eb9c63e6c22f8f6e10be7b1e225affected
  • 0ab13674a9bd10514486cf1670d71dbd8afec421 to < 2aee207e5b3c94ef859316008119ea06d6798d49affected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.11.8 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References