p PatchFirst

CVE-2015-9289

CVE-2015-9289

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.

CVSS 5.5 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.1.5-1

    Update to 4.1.5-1

  • linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.1.5-1

    Update to 4.1.5-1

  • linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.1.5-1

    Update to 4.1.5-1

  • linux Ubuntu:14.04:LTS

    Versions
    • 3.11.0-12.19
    • 3.12.0-1.3
    • 3.12.0-2.5
    • 3.12.0-2.7
    • 3.12.0-3.8
    • 3.12.0-3.9
    • 3.12.0-4.10
    • 3.12.0-4.12
    • 3.12.0-5.13
    • 3.12.0-7.15
    • 3.13.0-1.16
    • 3.13.0-2.17
    • 3.13.0-3.18
    • 3.13.0-4.19
    • 3.13.0-5.20
    • 3.13.0-6.23
    • 3.13.0-7.25
    • 3.13.0-7.26
    • 3.13.0-8.27
    • 3.13.0-8.28
    • 3.13.0-10.30
    • 3.13.0-11.31
    • 3.13.0-12.32
    • 3.13.0-13.33
    • 3.13.0-14.34
    • 3.13.0-15.35
    • 3.13.0-16.36
    • 3.13.0-17.37
    • 3.13.0-18.38
    • 3.13.0-19.39
    • 3.13.0-19.40
    • 3.13.0-20.42
    • 3.13.0-21.43
    • 3.13.0-22.44
    • 3.13.0-23.45
    • 3.13.0-24.46
    • 3.13.0-24.47
    • 3.13.0-27.50
    • 3.13.0-29.53
    • 3.13.0-30.54
    • 3.13.0-30.55
    • 3.13.0-32.57
    • 3.13.0-33.58
    • 3.13.0-34.60
    • 3.13.0-35.62
    • 3.13.0-36.63
    • 3.13.0-37.64
    • 3.13.0-39.66
    • 3.13.0-40.69
    • 3.13.0-41.70
    • 3.13.0-43.72
    • 3.13.0-44.73
    • 3.13.0-45.74
    • 3.13.0-46.75
    • 3.13.0-46.76
    • 3.13.0-46.77
    • 3.13.0-46.79
    • 3.13.0-48.80
    • 3.13.0-49.81
    • 3.13.0-49.83
    • 3.13.0-51.84
    • 3.13.0-52.85
    • 3.13.0-52.86
    • 3.13.0-53.88
    • 3.13.0-53.89
    • 3.13.0-54.91
    • 3.13.0-55.92
    • 3.13.0-55.94
    • 3.13.0-57.95
    • 3.13.0-58.97
    • 3.13.0-59.98
    • 3.13.0-61.100
    Affected ranges
    • ECOSYSTEM: < 3.13.0-62.102

    Update to 3.13.0-62.102

  • linux-azure-fde Ubuntu:20.04:LTS

    Versions
    • 5.4.0-1063.66+cvm2.2
    • 5.4.0-1063.66+cvm3.2
    • 5.4.0-1064.67+cvm1.1
    • 5.4.0-1065.68+cvm2.1
    • 5.4.0-1067.70+cvm1.1
    • 5.4.0-1068.71+cvm1.1
    • 5.4.0-1069.72+cvm1.1
    • 5.4.0-1070.73+cvm1.1
    • 5.4.0-1072.75+cvm1.1
    • 5.4.0-1073.76+cvm1.1
    • 5.4.0-1074.77+cvm1.1
    • 5.4.0-1076.79+cvm1.1
    • 5.4.0-1078.81+cvm1.1
    • 5.4.0-1080.83+cvm1.1
    • 5.4.0-1083.87+cvm1.1
    • 5.4.0-1085.90+cvm1.1
    • 5.4.0-1085.90+cvm2.1
    • 5.4.0-1086.91+cvm1.1
    • 5.4.0-1089.94+cvm1.2
    • 5.4.0-1090.95+cvm1.1
    • 5.4.0-1091.96+cvm1.1
    • 5.4.0-1092.97+cvm1.1
    • 5.4.0-1095.101+cvm1.1
    • 5.4.0-1098.104+cvm1.1
    • 5.4.0-1100.106+cvm1.1
    • 5.4.0-1103.109+cvm1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gke Ubuntu:20.04:LTS

    Versions
    • 5.4.0-1033.35
    • 5.4.0-1035.37
    • 5.4.0-1036.38
    • 5.4.0-1037.39
    • 5.4.0-1039.41
    • 5.4.0-1041.43
    • 5.4.0-1042.44
    • 5.4.0-1043.45
    • 5.4.0-1044.46
    • 5.4.0-1046.48
    • 5.4.0-1049.52
    • 5.4.0-1051.54
    • 5.4.0-1052.55
    • 5.4.0-1053.56
    • 5.4.0-1054.57
    • 5.4.0-1055.58
    • 5.4.0-1056.59
    • 5.4.0-1057.60
    • 5.4.0-1059.62
    • 5.4.0-1061.64
    • 5.4.0-1062.65
    • 5.4.0-1063.66
    • 5.4.0-1065.68
    • 5.4.0-1066.69
    • 5.4.0-1067.70
    • 5.4.0-1068.71
    • 5.4.0-1071.76
    • 5.4.0-1072.77
    • 5.4.0-1074.79
    • 5.4.0-1076.82
    • 5.4.0-1078.84
    • 5.4.0-1080.86
    • 5.4.0-1081.87
    • 5.4.0-1083.89
    • 5.4.0-1084.90
    • 5.4.0-1086.93
    • 5.4.0-1087.94
    • 5.4.0-1090.97
    • 5.4.0-1091.98
    • 5.4.0-1094.101
    • 5.4.0-1095.102
    • 5.4.0-1096.103
    • 5.4.0-1097.104
    • 5.4.0-1098.105
    • 5.4.0-1099.106
    • 5.4.0-1100.107
    • 5.4.0-1101.108
    • 5.4.0-1102.109
    • 5.4.0-1103.110
    • 5.4.0-1104.111
    • 5.4.0-1105.112
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-raspi2 Ubuntu:20.04:LTS

    Versions
    • 5.3.0-1007.8
    • 5.3.0-1014.16
    • 5.3.0-1015.17
    • 5.3.0-1017.19
    • 5.4.0-1004.4
    • 5.4.0-1006.6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-riscv Ubuntu:20.04:LTS

    Versions
    • 5.4.0-24.28
    • 5.4.0-26.30
    • 5.4.0-27.31
    • 5.4.0-28.32
    • 5.4.0-30.34
    • 5.4.0-31.35
    • 5.4.0-33.37
    • 5.4.0-34.38
    • 5.4.0-36.41
    • 5.4.0-37.42
    • 5.4.0-39.44
    • 5.4.0-40.45
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-intel-iot-realtime Ubuntu:22.04:LTS

    Versions
    • 5.15.0-1073.75
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-realtime Ubuntu:22.04:LTS

    Versions
    • 5.15.0-1032.35
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-riscv Ubuntu:22.04:LTS

    Versions
    • 5.13.0-1004.4
    • 5.13.0-1006.6+22.04.1
    • 5.13.0-1007.7+22.04.1
    • 5.13.0-1010.11+22.04.1
    • 5.15.0-1004.4
    • 5.15.0-1005.5
    • 5.15.0-1006.6
    • 5.15.0-1007.7
    • 5.15.0-1008.8
    • 5.15.0-1011.12
    • 5.15.0-1012.13
    • 5.15.0-1014.16
    • 5.15.0-1015.17
    • 5.15.0-1016.18
    • 5.15.0-1017.19
    • 5.15.0-1018.21
    • 5.15.0-1019.22
    • 5.15.0-1020.23
    • 5.15.0-1022.26
    • 5.15.0-1023.27
    • 5.15.0-1026.30
    • 5.15.0-1027.31
    • 5.15.0-1028.32
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-raspi-realtime Ubuntu:24.04:LTS

    Versions
    • 6.8.0-2019.20
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →