7.1

CVE-2024-46724

drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

Check the fb_channel_number range to avoid the array out-of-bounds
read error
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.10.226
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.167
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.109
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.50
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.9
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.15
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/32915dc909ff502823babfe07d5416c5b6e8a8b1
Patch
https://git.kernel.org/stable/c/45f7b02afc464c208e8f56bcbc672ef5c364c815
Patch
https://git.kernel.org/stable/c/725b728cc0c8c5fafdfb51cb0937870d33a40fa4
Patch
https://git.kernel.org/stable/c/d768394fa99467bcf2703bde74ddc96eeb0b71fa
Patch
https://git.kernel.org/stable/c/db7a86676fd624768a5d907faf34ad7bb4ff25f4
Patch
https://git.kernel.org/stable/c/f9267972490f9fcffe146e79828e97acc0da588c
Patch
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html