CVE-2024-43877media: pci: ivtv: Add check for DMA map result
- 7.8HighCVSS base score
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma->SG_length' is 0. This value is later used to access 'dma->SGarray[dma->SG_length - 1]', which will cause out of bounds access. Add check to return early on invalid value. Adjust warnings accordingly. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Timeline
ID reserved
By Linux
- 4 days later
· 4 days later
Published
- 24 months later
· 24 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 4551236b55e80b2c1720b10b77e9400118b2339e – < 38f72c7e7c6b55614f9407555fd5ce9d019b0fa4
- affected 66c8a83bf1de2eb3eea4734c7eda22255a965f11 – < 81d0664bed91a858c7b50c263954b59d65f1b414
- affected 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 – < 24062aa7407091dee3e45a8e8037df437e848718
- affected 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 – < 3d8fd92939e21ff0d45100ab208f8124af79402a
- affected 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 – < c766065e8272085ea9c436414b7ddf1f12e7787b
- affected 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 – < 629913d6d79508b166c66e07e4857e20233d85a9
- affected 1b00b7335000c0e107f774cc8ee4d5340f824f28
- affected 5.4.301 – < 5.5
- affected 5.16
- unaffected < 5.16
- unaffected 6.1.103 – ≤ 6.1.*
- unaffected 6.6.44 – ≤ 6.6.*
- unaffected 6.10.3 – ≤ 6.10.*
- unaffected 6.11 – ≤ *
References
References7
- https://git.kernel.org/stable/c/38f72c7e7c6b55614f9407555fd5ce9d019b0fa4 (opens in a new tab)
- https://git.kernel.org/stable/c/81d0664bed91a858c7b50c263954b59d65f1b414 (opens in a new tab)
- https://git.kernel.org/stable/c/24062aa7407091dee3e45a8e8037df437e848718 (opens in a new tab)
- https://git.kernel.org/stable/c/3d8fd92939e21ff0d45100ab208f8124af79402a (opens in a new tab)
- https://git.kernel.org/stable/c/c766065e8272085ea9c436414b7ddf1f12e7787b (opens in a new tab)
- https://git.kernel.org/stable/c/629913d6d79508b166c66e07e4857e20233d85a9 (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-40527 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-43877)Record last updated .