CVE-2024-46724

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46724
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number Check the fb_channel_number range to avoid the array out-of-bounds read error

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/32915dc909ff502823babfe07d5416c5b6e8a8b1 Patch
https://git.kernel.org/stable/c/45f7b02afc464c208e8f56bcbc672ef5c364c815 Patch
https://git.kernel.org/stable/c/725b728cc0c8c5fafdfb51cb0937870d33a40fa4 Patch
https://git.kernel.org/stable/c/d768394fa99467bcf2703bde74ddc96eeb0b71fa Patch
https://git.kernel.org/stable/c/db7a86676fd624768a5d907faf34ad7bb4ff25f4 Patch
https://git.kernel.org/stable/c/f9267972490f9fcffe146e79828e97acc0da588c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

20 Sep 2024, 18:30

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-125
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
References () https://git.kernel.org/stable/c/32915dc909ff502823babfe07d5416c5b6e8a8b1 - () https://git.kernel.org/stable/c/32915dc909ff502823babfe07d5416c5b6e8a8b1 - Patch
References () https://git.kernel.org/stable/c/45f7b02afc464c208e8f56bcbc672ef5c364c815 - () https://git.kernel.org/stable/c/45f7b02afc464c208e8f56bcbc672ef5c364c815 - Patch
References () https://git.kernel.org/stable/c/725b728cc0c8c5fafdfb51cb0937870d33a40fa4 - () https://git.kernel.org/stable/c/725b728cc0c8c5fafdfb51cb0937870d33a40fa4 - Patch
References () https://git.kernel.org/stable/c/d768394fa99467bcf2703bde74ddc96eeb0b71fa - () https://git.kernel.org/stable/c/d768394fa99467bcf2703bde74ddc96eeb0b71fa - Patch
References () https://git.kernel.org/stable/c/db7a86676fd624768a5d907faf34ad7bb4ff25f4 - () https://git.kernel.org/stable/c/db7a86676fd624768a5d907faf34ad7bb4ff25f4 - Patch
References () https://git.kernel.org/stable/c/f9267972490f9fcffe146e79828e97acc0da588c - () https://git.kernel.org/stable/c/f9267972490f9fcffe146e79828e97acc0da588c - Patch

20 Sep 2024, 12:30

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: Se corrige la lectura fuera de los límites de df_v1_7_channel_number. Verifique el rango fb_channel_number para evitar el error de lectura fuera de los límites de la matriz.

18 Sep 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-18 07:15

Updated : 2024-09-20 18:30

NVD link : CVE-2024-46724

Mitre link : CVE-2024-46724

CVE.ORG link : CVE-2024-46724

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read