{"id":"CVE-2024-53081","state":"PUBLISHED","title":"media: ar0521: don't overflow when checking PLL values","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ar0521: don't overflow when checking PLL values\n\nThe PLL checks are comparing 64 bit integers with 32 bit\nones, as reported by Coverity. Depending on the values of\nthe variables, this may underflow.\n\nFix it ensuring that both sides of the expression are u64.","publishedAt":"2024-11-19T17:45:11.594Z","updatedAt":"2026-05-11T20:50:29.201Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"5e1523076acf95b4ea68d19b6f27e6891267cc24","versionType":"git"},{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"a244b82d0ae60326901f2b50c15e3118298b7ecd","versionType":"git"},{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"97ed0c0332d5525653668b31acf62ff1e6b50784","versionType":"git"},{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"438d3085ba5b8b5bfa5290faa594e577f6ac9aa7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/i2c/ar0521.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.0","versionType":"semver"},{"version":"6.1.117","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.61","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.11.8","status":"unaffected","lessThanOrEqual":"6.11.*","versionType":"semver"},{"version":"6.12","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/i2c/ar0521.c"]}],"references":["https://git.kernel.org/stable/c/5e1523076acf95b4ea68d19b6f27e6891267cc24","https://git.kernel.org/stable/c/a244b82d0ae60326901f2b50c15e3118298b7ecd","https://git.kernel.org/stable/c/97ed0c0332d5525653668b31acf62ff1e6b50784","https://git.kernel.org/stable/c/438d3085ba5b8b5bfa5290faa594e577f6ac9aa7","https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"],"weaknesses":["CWE-191"],"ingestedAt":"2026-10-29T20:08:04.920Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/53xxx/CVE-2024-53081.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-53081","state":"PUBLISHED","datePublished":"2024-11-19T17:45:11.594Z","dateUpdated":"2026-05-11T20:50:29.201Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-11-19T17:17:24.978Z"},"containers":{"cna":{"title":"media: ar0521: don't overflow when checking PLL values","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ar0521: don't overflow when checking PLL values\n\nThe PLL checks are comparing 64 bit integers with 32 bit\nones, as reported by Coverity. Depending on the values of\nthe variables, this may underflow.\n\nFix it ensuring that both sides of the expression are u64."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"5e1523076acf95b4ea68d19b6f27e6891267cc24","versionType":"git"},{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"a244b82d0ae60326901f2b50c15e3118298b7ecd","versionType":"git"},{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"97ed0c0332d5525653668b31acf62ff1e6b50784","versionType":"git"},{"version":"852b50aeed153b513c0b36298559114fab0fab80","status":"affected","lessThan":"438d3085ba5b8b5bfa5290faa594e577f6ac9aa7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/i2c/ar0521.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.0","versionType":"semver"},{"version":"6.1.117","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.61","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.11.8","status":"unaffected","lessThanOrEqual":"6.11.*","versionType":"semver"},{"version":"6.12","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/i2c/ar0521.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/5e1523076acf95b4ea68d19b6f27e6891267cc24"},{"url":"https://git.kernel.org/stable/c/a244b82d0ae60326901f2b50c15e3118298b7ecd"},{"url":"https://git.kernel.org/stable/c/97ed0c0332d5525653668b31acf62ff1e6b50784"},{"url":"https://git.kernel.org/stable/c/438d3085ba5b8b5bfa5290faa594e577f6ac9aa7"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T20:50:29.201Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.1.117"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.6.61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.11.8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.12"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-53081","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-01T20:12:00.620890Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-191","lang":"en","type":"CWE","description":"CWE-191 Integer Underflow (Wrap or Wraparound)"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-01T20:17:14.868Z"}},{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T22:29:03.802Z"}}]}}}