CVE-2024-24861 describes a race condition within the Linux kernel's media/xc4000 device driver, specifically in the xc4000_get_frequency() function, affecting Linux kernel versions. This flaw can lead to a return value overflow, potentially causing system malfunction or a denial of service. With a CVSS score of 6.3 (Medium), exploitation requires local access and high attack complexity, but could result in significant impact to integrity and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.0.101CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.0, <= 6.7.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
3.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:* | ||
6.8CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:* | ||
>= v3.1-rc1, < v6.8-rc1CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP4 Security Updates
Oct 29, 2024HP ThinPro 8.1 SP4 Security Updates
Oct 29, 2024Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()
Feb 13, 2024