Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-47698 Details

Description

In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure index in rtl2832_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->filters is a 32-bit value, so set_bit and clear_bit functions should only operate on indices from 0 to 31. If index is 32, it will attempt to access a non-existent 33rd bit, leading to out-of-bounds access. Change the boundary check from index > 32 to index >= 32 to resolve this issue. [hverkuil: added fixes tag, rtl2830_pid_filter -> rtl2832_pid_filter in logmsg]

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/15bea004e939d938a6771dfcf2a26cc899ffd20a kernel.orgPatch
https://git.kernel.org/stable/c/49b33c38d202d3327dcfd058e27f541dcc308b92 kernel.orgPatch
https://git.kernel.org/stable/c/527ab3eb3b0b4a6ee00e183c1de6a730239e2835 kernel.orgPatch
https://git.kernel.org/stable/c/66dbe0df6eccc7ee53a2c35016ce81e13b3ff447 kernel.orgPatch
https://git.kernel.org/stable/c/6ae3b9aee42616ee93c4585174f40c767828006d kernel.orgPatch

see all 11 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-787Out-of-bounds Write[email protected]

Affected Products

ProductVersions
debian debian linux
11.0

CPE

  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
linux linux kernel
>= 4.0, < 4.19.323
>= 4.20, < 5.4.285
>= 5.5, < 5.10.227
>= 5.11, < 5.15.168
>= 5.16, < 6.1.113

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

9 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-47698
NVD Published Date:
Oct 21, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-47698 Details - Not Deferred