CVE-2024-27075: Debian Linux

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previous patch worked around a KASAN issue in stv0367, now a similar problem showed up with clang: drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367ter_set_frontend' [-Werror,-Wframe-larger-than] 1214 | static int stv0367ter_set_frontend(struct dvb_frontend *fe) Rework the stv0367_writereg() function to be simpler and mark both register access functions as noinline_for_stack so the temporary i2c_msg structures do not get duplicated on the stack when KASAN_STACK is enabled.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 4.4.168, before 4.5 (fixed in 4.5); from 4.9.82, before 4.10 (fixed in 4.10); from 4.14.20, before 4.15 (fixed in 4.15); from 4.15.4, before 4.19.311 (fixed in 4.19.311); from 4.20, before 5.4.273 (fixed in 5.4.273); from 5.5, before 5.10.214 (fixed in 5.10.214); …

Published 2024-05-01. Last modified 2026-06-17.