CVE-2024-27042
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2024
Last modified:
23/12/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amdgpu: Fix potential out-of-bounds access in &#39;amdgpu_discovery_reg_base_init()&#39;<br />
<br />
The issue arises when the array &#39;adev->vcn.vcn_config&#39; is accessed<br />
before checking if the index &#39;adev->vcn.num_vcn_inst&#39; is within the<br />
bounds of the array.<br />
<br />
The fix involves moving the bounds check before the array access. This<br />
ensures that &#39;adev->vcn.num_vcn_inst&#39; is within the bounds of the array<br />
before it is used as an index.<br />
<br />
Fixes the below:<br />
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c:1289 amdgpu_discovery_reg_base_init() error: testing array offset &#39;adev->vcn.num_vcn_inst&#39; after use.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.19 (including) | 6.6.23 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.7.11 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8 (including) | 6.8.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/8db10cee51e3e11a6658742465edc21986cf1e8d
- https://git.kernel.org/stable/c/8f3e68c6a3fff53c2240762a47a0045d89371775
- https://git.kernel.org/stable/c/b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058
- https://git.kernel.org/stable/c/cdb637d339572398821204a1142d8d615668f1e9
- https://git.kernel.org/stable/c/8db10cee51e3e11a6658742465edc21986cf1e8d
- https://git.kernel.org/stable/c/8f3e68c6a3fff53c2240762a47a0045d89371775
- https://git.kernel.org/stable/c/b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058
- https://git.kernel.org/stable/c/cdb637d339572398821204a1142d8d615668f1e9



