In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previous patch worked around a KASAN issue in stv0367, now a similar problem showed up with clang: drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than] 1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe) Rework the stv0367_writereg() function to be simpler and mark both register access functions as noinline_for_stack so the temporary i2c_msg structures do not get duplicated on the stack when KASAN_STACK is enabled.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/107052a8cfeff3a97326277192b4f052e4860a8a cve-icon cve-icon
https://git.kernel.org/stable/c/7a4cf27d1f0538f779bf31b8c99eda394e277119 cve-icon cve-icon
https://git.kernel.org/stable/c/8fad9c5bb00d3a9508d18bbfe832e33a47377730 cve-icon cve-icon
https://git.kernel.org/stable/c/c073c8cede5abd3836e83d70d72606d11d0759d4 cve-icon cve-icon
https://git.kernel.org/stable/c/d20b64f156de5d10410963fe238d82a4e7e97a2f cve-icon cve-icon
https://git.kernel.org/stable/c/d6b4895197ab5a47cb81c6852d49320b05052960 cve-icon cve-icon
https://git.kernel.org/stable/c/ed514ecf4f29c80a2f09ae3c877059b401efe893 cve-icon cve-icon
https://git.kernel.org/stable/c/fa8b472952ef46eb632825051078c21ce0cafe55 cve-icon cve-icon
https://git.kernel.org/stable/c/fb07104a02e87c06c39914d13ed67fd8f839ca82 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024050134-CVE-2024-27075-5e4f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-27075 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-27075 cve-icon
History

Tue, 23 Dec 2025 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Thu, 19 Dec 2024 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-01T13:04:44.494Z

Updated: 2025-05-04T12:55:28.632Z

Reserved: 2024-02-19T14:20:24.217Z

Link: CVE-2024-27075

cve-icon Vulnrichment

Updated: 2024-08-02T00:27:57.815Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-01T13:15:51.257

Modified: 2025-12-23T00:39:32.473

Link: CVE-2024-27075

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-01T00:00:00Z

Links: CVE-2024-27075 - Bugzilla