CVE-2024-50287

Summary

CVE-2024-50287 is a newly identified vulnerability in the Linux kernel. This issue was discovered by Coverity and affects the v4l2-tpg driver. The logic at tpg_precalculate_line() inadvertently rescales the buffer when scaled_width is equal to zero, leading to a division by zero. To mitigate this risk, the Linux kernel team has implemented a WARN_ON_ONCE() check, which will trigger such instances and prevent the precalculation process. This change aims to prevent potential crashes or unexpected behavior caused by the division by zero.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.