CVE-2024-49894

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49894
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in `cm_helper_translate_curve_to_degamma_hw_format` function. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds the function returns false to indicate an error. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:594 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:595 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:596 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/07078fa5d589a7fbce8f81ea8acf7aa0021ab38e Patch
https://git.kernel.org/stable/c/122e3a7a8c7bcbe3aacddd6103f67f9f36bed473 Patch
https://git.kernel.org/stable/c/2495c8e272d84685403506833a664fad932e453a Patch
https://git.kernel.org/stable/c/2f5da549535be8ccd2ab7c9abac8562ad370b181 Patch
https://git.kernel.org/stable/c/b3dfa878257a7e98830b3009ca5831a01d8f85fc
https://git.kernel.org/stable/c/b7e99058eb2e86aabd7a10761e76cae33d22b49f Patch
https://git.kernel.org/stable/c/c130a3c09e3746c1a09ce26c20d21d449d039b1d Patch
https://git.kernel.org/stable/c/c6979719012a90e5b8e3bc31725fbfdd0b9b2b79 Patch
https://git.kernel.org/stable/c/f5f6d90087131812c1e4b9d3103f400f1624396d
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Nov 2024, 16:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/b3dfa878257a7e98830b3009ca5831a01d8f85fc -
  • () https://git.kernel.org/stable/c/f5f6d90087131812c1e4b9d3103f400f1624396d -

25 Oct 2024, 14:32

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/07078fa5d589a7fbce8f81ea8acf7aa0021ab38e - () https://git.kernel.org/stable/c/07078fa5d589a7fbce8f81ea8acf7aa0021ab38e - Patch
References () https://git.kernel.org/stable/c/122e3a7a8c7bcbe3aacddd6103f67f9f36bed473 - () https://git.kernel.org/stable/c/122e3a7a8c7bcbe3aacddd6103f67f9f36bed473 - Patch
References () https://git.kernel.org/stable/c/2495c8e272d84685403506833a664fad932e453a - () https://git.kernel.org/stable/c/2495c8e272d84685403506833a664fad932e453a - Patch
References () https://git.kernel.org/stable/c/2f5da549535be8ccd2ab7c9abac8562ad370b181 - () https://git.kernel.org/stable/c/2f5da549535be8ccd2ab7c9abac8562ad370b181 - Patch
References () https://git.kernel.org/stable/c/b7e99058eb2e86aabd7a10761e76cae33d22b49f - () https://git.kernel.org/stable/c/b7e99058eb2e86aabd7a10761e76cae33d22b49f - Patch
References () https://git.kernel.org/stable/c/c130a3c09e3746c1a09ce26c20d21d449d039b1d - () https://git.kernel.org/stable/c/c130a3c09e3746c1a09ce26c20d21d449d039b1d - Patch
References () https://git.kernel.org/stable/c/c6979719012a90e5b8e3bc31725fbfdd0b9b2b79 - () https://git.kernel.org/stable/c/c6979719012a90e5b8e3bc31725fbfdd0b9b2b79 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-129
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Corrige el índice fuera de los límites en la traducción del formato de hardware degamma Corrige el problema del índice fuera de los límites en la función `cm_helper_translate_curve_to_degamma_hw_format`. El problema podría ocurrir cuando el índice 'i' excede el número de puntos de función de transferencia (TRANSFER_FUNC_POINTS). La corrección agrega una verificación para garantizar que 'i' esté dentro de los límites antes de acceder a los puntos de función de transferencia. Si 'i' está fuera de los límites, la función devuelve falso para indicar un error. Reportado por smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:594 cm_helper_translate_curve_to_degamma_hw_format() error: desbordamiento de búfer 'output_tf-&gt;tf_pts.red' 1025 &lt;= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:595 cm_helper_translate_curve_to_degamma_hw_format() error: desbordamiento de búfer 'output_tf-&gt;tf_pts.green' 1025 &lt;= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:596 cm_helper_translate_curve_to_degamma_hw_format() error: desbordamiento de búfer 'output_tf-&gt;tf_pts.blue' 1025 &lt;= s32max

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2024-11-08 16:15

NVD link : CVE-2024-49894

Mitre link : CVE-2024-49894

CVE.ORG link : CVE-2024-49894

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index