In the Linux kernel, the following vulnerability has been resolved:
media: dvb-core: add missing buffer index check
dvb_vb2_expbuf() didn't check if the given buffer index was
for a valid buffer. Add this check.
CVE ID: CVE-2024-50291
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.5
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Vendor: Linux
Product: Linux
EPSS Score: 0.02% (probability of being exploited)
EPSS Percentile: 4.39% (scored less or equal to compared to others)
EPSS Date: 2025-06-02 (when was this score calculated)