CVE-2024-56769— media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-56769
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg Syzbot reports [1] an uninitialized value issue found by KMSAN in dib3000_read_reg(). Local u8 rb[2] is used in i2c_transfer() as a read buffer; in case that call fails, the buffer may end up with some undefined values. Since no elaborate error handling is expected in dib3000_write_reg(), simply zero out rb buffer to mitigate the problem. [1] Syzkaller report dvb-usb: bulk message failed: -22 (6/0) ===================================================== BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758 dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758 dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31 dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290 dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline] dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline] dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310 dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110 ... Local variable rb created at: dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54 dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758 ...
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在media模块的dvb-frontends/dib3000mb驱动中，dib3000_read_reg函数中使用了未初始化的局部变量rb作为读缓冲区，当i2c_transfer调用失败时，缓冲区可能包含未定义值，进而导致dib3000mb_attach函数中出现KMSAN报告的uninit-value错误，影响设备的正常工作和数据传输的可靠性。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-56769
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-56769
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-01-06 · 12 CVEs total
| CVE-2024-56757 | Bluetooth: btusb: mediatek: add intf release flow when usb disconnect | |
| CVE-2024-56758 | btrfs: check folio mapping after unlock in relocate_one_folio() | |
| CVE-2024-56759 | btrfs: fix use-after-free when COWing tree bock and tracing is enabled | |
| CVE-2024-56760 | PCI/MSI: Handle lack of irqdomain gracefully | |
| CVE-2024-56761 | x86/fred: Clear WFE in missing-ENDBRANCH #CPs | |
| CVE-2024-56763 | tracing: Prevent bad count for tracing_cpumask_write | |
| CVE-2024-56764 | ublk: detach gendisk from ublk device if add_disk() fails | |
| CVE-2024-56765 | powerpc/pseries/vas: Add close() callback in vas_vm_ops struct | |
| CVE-2024-56767 | dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset | |
| CVE-2024-56766 | mtd: rawnand: fix double free in atmel_pmecc_create_user() | |
| CVE-2024-56768 | bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP |
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-56769
No comments yet