CVE-2024-42223

Summary

CVE-2024-42223 is a newly identified vulnerability in the Linux kernel that affects the media driver dvb-frontends for the tda10048 chip. The issue arises from an integer overflow in the calculation of state->xtal_hz, which can be up to 16M. When this value is multiplied by pll_mfactor, a 32-bit integer overflow can occur. To mitigate this vulnerability, a new 64-bit variable has been introduced to hold the calculations and prevent potential integer overflows.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.