Threats tagged 'ghsa-hcp4-6c7v-w8f2'

CVE-2024-42136 is a high-severity vulnerability in the Linux kernel's cdrom driver caused by an unintentional signed integer overflow in the last_media_change check. This overflow was detected by the reintroduced signed integer overflow sanitizer in the kernel, triggered by arithmetic operations on signed 64-bit integers. The issue has been resolved by rearranging the check to avoid performing arithmetic that causes the overflow.