5.5

CVE-2024-40988

drm/radeon: fix UBSAN warning in kv_dpm.c

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: fix UBSAN warning in kv_dpm.c

Adds bounds check for sumo_vid_mapping_entry.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 4.19.317
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.279
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.221
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.162
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.96
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.36
Linux ≫ Linux Kernel Version >= 6.7 < 6.9.7
Linux ≫ Linux Kernel Version6.10 Updaterc1
Linux ≫ Linux Kernel Version6.10 Updaterc2
Linux ≫ Linux Kernel Version6.10 Updaterc3
Linux ≫ Linux Kernel Version6.10 Updaterc4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.194
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://git.kernel.org/stable/c/07e8f15fa16695cf4c90e89854e59af4a760055b
Patch
https://git.kernel.org/stable/c/468a50fd46a09bba7ba18a11054ae64b6479ecdc
Patch
https://git.kernel.org/stable/c/9e57611182a817824a17b1c3dd300ee74a174b42
Patch
https://git.kernel.org/stable/c/a498df5421fd737d11bfd152428ba6b1c8538321
Patch
https://git.kernel.org/stable/c/a8c6df9fe5bc390645d1e96eff14ffe414951aad
Patch
https://git.kernel.org/stable/c/cf1cc8fcfe517e108794fb711f7faabfca0dc855
Patch
https://git.kernel.org/stable/c/f803532bc3825384100dfc58873e035d77248447
Patch
https://git.kernel.org/stable/c/febe794b83693257f21a23d2e03ea695a62449c8
Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html