CVE-2024-50290

Q: What is the severity of CVE-2024-50290?

CVE-2024-50290 has a CVSS score of 5.5 (MEDIUM). A vulnerability in the Linux kernel's cx24116 media driver could allow integer underflow when reading SNR registers fails, returning negative values. This affects systems using this specific DVB driver for digital TV reception. The issue requires local access or another vulnerability to trigger.

5.5 MEDIUM

📋 TL;DR

A vulnerability in the Linux kernel's cx24116 media driver could allow integer underflow when reading SNR registers fails, returning negative values. This affects systems using this specific DVB driver for digital TV reception. The issue requires local access or another vulnerability to trigger.

💻 Affected Systems

Products:

Linux kernel with cx24116 driver enabled

Versions: Linux kernel versions before the fix commits (specific versions vary by distribution)

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ✅ No

Notes: Only vulnerable if cx24116 driver is compiled and loaded (typically for DVB-S/S2 TV tuners). Most standard configurations don't enable this driver.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic or system crash leading to denial of service, potentially allowing privilege escalation if combined with other vulnerabilities.

🟠

Likely Case

System instability or crash requiring reboot, affecting media functionality on affected devices.

🟢

If Mitigated

Minimal impact with proper access controls preventing unauthorized users from accessing the vulnerable driver.

🌐 Internet-Facing: LOW - Requires local access or kernel-level access to trigger.

🏢 Internal Only: MEDIUM - Could be exploited by local users or through other vulnerabilities to cause system instability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: NO

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access to trigger the vulnerable code path. No known public exploits.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commits 127b9076baeadd734b18ddc8f2cd93b47d5a3ea3 or later

Vendor Advisory: https://git.kernel.org/stable/c/127b9076baeadd734b18ddc8f2cd93b47d5a3ea3

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution. 2. Rebuild kernel if compiling from source with the fix commits. 3. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable cx24116 driver

linux

Prevent loading of vulnerable driver module

echo 'blacklist cx24116' >> /etc/modprobe.d/blacklist.conf
rmmod cx24116

🧯 If You Can't Patch

Restrict access to users who can interact with DVB devices
Monitor system logs for crashes related to cx24116 driver

🔍 How to Verify

Check if Vulnerable:

Check if cx24116 module is loaded: lsmod | grep cx24116 AND check kernel version against patched versions

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes fix commits and cx24116 module loads without issues

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages
cx24116 driver errors in dmesg
System crashes

Network Indicators:

None - local vulnerability

SIEM Query:

source="kernel" AND ("cx24116" OR "panic" OR "Oops")

📊 Metadata

CVE ID: CVE-2024-50290

CVSS v3 Score: 5.5 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-191

Published: November 19, 2024

Last Updated: November 3, 2025

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Disable cx24116 driver

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities