CVE-2024-27045

drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'

Tell snprintf() to store at most 10 bytes in the output buffer
instead of 30.

Fixes the below:
drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: soluciona un posible desbordamiento del búfer en 'dp_dsc_clock_en_read()' Dile a snprintf() que almacene como máximo 10 bytes en el búfer de salida en lugar de 30. Corrige lo siguiente : drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() está imprimiendo demasiado 30 vs 10

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-02-19 CVE Reserved
2024-05-01 CVE Published
2024-12-19 CVE Updated
2024-12-24 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (9)

URL	Tag	Source
https://git.kernel.org/stable/c/c06e09b76639657f284bfaf1cce29557a2515e85	Vuln. Introduced
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/ff28893c96c5e0927a4da10cd24a3522ca663515	2024-03-26
https://git.kernel.org/stable/c/440f059837418fac1695b65d3ebc6080d33be877	2024-03-26
https://git.kernel.org/stable/c/d346b3e5b25c95d504478507eb867cd3818775ab	2024-03-26
https://git.kernel.org/stable/c/ad76fd30557d6a106c481e4606a981221ca525f7	2024-03-26
https://git.kernel.org/stable/c/eb9327af3621d26b1d83f767c97a3fe8191a3a65	2024-03-26
https://git.kernel.org/stable/c/cf114d8d4a8d78df272116a745bb43b48cef65f4	2024-03-26
https://git.kernel.org/stable/c/4b09715f1504f1b6e8dff0e9643630610bc05141	2024-01-25

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.9 < 5.10.214 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.9 < 5.10.214"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.9 < 5.15.153 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.9 < 5.15.153"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.9 < 6.1.83 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.9 < 6.1.83"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.9 < 6.6.23 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.9 < 6.6.23"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.9 < 6.7.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.9 < 6.7.11"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.9 < 6.8.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.9 < 6.8.2"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.9 < 6.9 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.9 < 6.9"		en		Affected