CVE-2024-27042

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2024
Last modified:
23/12/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amdgpu: Fix potential out-of-bounds access in &amp;#39;amdgpu_discovery_reg_base_init()&amp;#39;<br /> <br /> The issue arises when the array &amp;#39;adev-&gt;vcn.vcn_config&amp;#39; is accessed<br /> before checking if the index &amp;#39;adev-&gt;vcn.num_vcn_inst&amp;#39; is within the<br /> bounds of the array.<br /> <br /> The fix involves moving the bounds check before the array access. This<br /> ensures that &amp;#39;adev-&gt;vcn.num_vcn_inst&amp;#39; is within the bounds of the array<br /> before it is used as an index.<br /> <br /> Fixes the below:<br /> drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c:1289 amdgpu_discovery_reg_base_init() error: testing array offset &amp;#39;adev-&gt;vcn.num_vcn_inst&amp;#39; after use.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.19 (including) 6.6.23 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.7.11 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.8 (including) 6.8.2 (excluding)