CVE-2024-27008
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
In the Linux kernel, the following vulnerability has been resolved:
drm: nv04: Fix out of bounds access
When Output Resource (dcb->or) value is assigned in
fabricate_dcb_output(), there may be out of bounds access to
dac_users array in case dcb->or is zero because ffs(dcb->or) is
used as index there.
The 'or' argument of fabricate_dcb_output() must be interpreted as a
number of bit to set, not value.
Utilize macros from 'enum nouveau_or' in calls instead of hardcoding.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected (15)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.6.38 to 4.19.313 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 38 |
References (21)
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Timeline
No history available yet.