CVE-2024-26767

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26767
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations [why]: issues fixed: - comparison with wider integer type in loop condition which can cause infinite loops - pointer dereference before null check

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0484e05d048b66d01d1f3c1d2306010bb57d8738 Patch
https://git.kernel.org/stable/c/070fda699dfdce560755379bc428d9edada7a54e
https://git.kernel.org/stable/c/71783d1ff65204d69207fd156d4b2eb1d3882375 Patch
https://git.kernel.org/stable/c/beea9ab9080cd2ef46296070bb327af066ee09d7 Patch
https://git.kernel.org/stable/c/0484e05d048b66d01d1f3c1d2306010bb57d8738 Patch
https://git.kernel.org/stable/c/71783d1ff65204d69207fd156d4b2eb1d3882375 Patch
https://git.kernel.org/stable/c/beea9ab9080cd2ef46296070bb327af066ee09d7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
History

07 Mar 2025, 18:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/070fda699dfdce560755379bc428d9edada7a54e -

27 Feb 2025, 14:34

Type Values Removed Values Added
CWE CWE-476
CWE-835
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/0484e05d048b66d01d1f3c1d2306010bb57d8738 - () https://git.kernel.org/stable/c/0484e05d048b66d01d1f3c1d2306010bb57d8738 - Patch
References () https://git.kernel.org/stable/c/71783d1ff65204d69207fd156d4b2eb1d3882375 - () https://git.kernel.org/stable/c/71783d1ff65204d69207fd156d4b2eb1d3882375 - Patch
References () https://git.kernel.org/stable/c/beea9ab9080cd2ef46296070bb327af066ee09d7 - () https://git.kernel.org/stable/c/beea9ab9080cd2ef46296070bb327af066ee09d7 - Patch

21 Nov 2024, 09:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: tipos de enteros fijos y ubicaciones de verificación nula [por qué]: problemas solucionados: - comparación con un tipo de entero más amplio en condición de bucle que puede causar bucles infinitos - desreferencia del puntero antes cheque nulo
References () https://git.kernel.org/stable/c/0484e05d048b66d01d1f3c1d2306010bb57d8738 - () https://git.kernel.org/stable/c/0484e05d048b66d01d1f3c1d2306010bb57d8738 -
References () https://git.kernel.org/stable/c/71783d1ff65204d69207fd156d4b2eb1d3882375 - () https://git.kernel.org/stable/c/71783d1ff65204d69207fd156d4b2eb1d3882375 -
References () https://git.kernel.org/stable/c/beea9ab9080cd2ef46296070bb327af066ee09d7 - () https://git.kernel.org/stable/c/beea9ab9080cd2ef46296070bb327af066ee09d7 -

03 Apr 2024, 17:24

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-03 17:15

Updated : 2025-03-07 18:15

NVD link : CVE-2024-26767

Mitre link : CVE-2024-26767

CVE.ORG link : CVE-2024-26767

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')