CVE-2015-9289

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.4

Description A buffer overflow occurs when checking userspace parameters in the drivers/media/dvb-frontends/cx24116.c file. The maximum size for a DiSEqC command is 6, according to the userspace API, but the code allows larger values, such as 23.

Recommendations For versions prior to 4.1.4, update to version 4.1.4 or later to resolve the issue. As a temporary workaround, consider restricting the size of DiSEqC commands to the maximum allowed value of 6 to minimize the risk of exploitation.