summaryrefslogtreecommitdiffstats
path: root/retired/CVE-2023-0615
blob: 91ceb465c1cef68a3e6916be07f62796520a8e5b (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Description: multiple issues for the Video for Linux version 2 test driver
References:
 https://bugzilla.redhat.com/show_bug.cgi?id=2166287
 https://bugzilla.redhat.com/show_bug.cgi?id=2166287#c7
Notes:
 carnil> According to the Red Hat Bugzilla #c7 reference, they should be
 carnil> fixed all in the latest upstream vivid code. Debian builds
 carnil> VIDEO_VIVID as module.
Bugs:
 bwh> The issues mentioned are (1) memory leak (2) divide by zero
 bwh> (3) integer overflow and were already fixed by 2023-02-01.
 bwh> So I think (1) was fixed by 1f65ea411cc7 "media: vivid:
 bwh> dev->bitmap_cap wasn't freed in all cases" and (3) was fixed
 bwh> by f8bcaf714abf "media: vivid: s_fbuf: add more sanity checks".
 bwh> By process of elimination, I think (2) must have been fixed by
 bwh> 69d78a80da4e "media: vivid: set num_in/outputs to 0 if not
 bwh> supported" although I didn't see a specific code flow that
 bwh> would lead to division by zero.
upstream: released (6.1-rc3) [1f65ea411cc7b6ff128d82a3493d7b5648054e6f, 69d78a80da4ef12faf2a6f9cfa2097ab4ac43983, f8bcaf714abfc94818dff8c0db84d750433984f4]
6.1-upstream-stable: N/A "Fixed before branch point"
5.10-upstream-stable: released (5.10.153) [147b8f1892aaa474f912ac75babfd316ee0de672, 905f05c0ab1950e6f24611b2ea69625f154392d5, 1cf51d51581c1e0a876623e0a89d10029fc8cdc4]
4.19-upstream-stable: released (4.19.264) [29385e601f3420cfe46550271714b6685719eb33, c106967b34725dfb1c76a914b6c2e2773936323f]
sid: released (6.1.4-1)
6.1-bookworm-security: N/A "Fixed before branch point"
5.10-bullseye-security: released (5.10.158-1)
4.19-buster-security: released (4.19.282-1)

© 2014-2024 Faster IT GmbH | imprint | privacy policy