CVE-2024-27075: media: dvb-frontends: avoid stack overflow warnings with clang

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-01 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previous patch worked around a KASAN issue in stv0367, now a similar problem showed up with clang: drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than] 1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe) Rework the stv0367_writereg() function to be simpler and mark both register access functions as noinline_for_stack so the temporary i2c_msg structures do not get duplicated on the stack when KASAN_STACK is enabled.

Affected products

Debian Linux: 10.0
Linux kernel: from 4.4.168 before 4.5; from 4.9.82 before 4.10; from 4.14.20 before 4.15; from 4.15.4 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214 — fixed in 4.10, 4.15, 4.19.311, 4.5, 5.10.214, 5.15.153

How to fix

Upgrade to a fixed version: Linux kernel 4.10, 4.15, 4.19.311, 4.5. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-27075 or the next vulnerability affects your stack