CVE-2024-27045

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'

Tell snprintf() to store at most 10 bytes in the output buffer instead of 30.

Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc06e09b76639657f284bfaf1cce29557a2515e85 < ff28893c96c5e0927a4da10cd24a3522ca663515affected
LinuxLinuxc06e09b76639657f284bfaf1cce29557a2515e85 < 440f059837418fac1695b65d3ebc6080d33be877affected
LinuxLinuxc06e09b76639657f284bfaf1cce29557a2515e85 < d346b3e5b25c95d504478507eb867cd3818775abaffected
LinuxLinuxc06e09b76639657f284bfaf1cce29557a2515e85 < ad76fd30557d6a106c481e4606a981221ca525f7affected
LinuxLinuxc06e09b76639657f284bfaf1cce29557a2515e85 < eb9327af3621d26b1d83f767c97a3fe8191a3a65affected
LinuxLinuxc06e09b76639657f284bfaf1cce29557a2515e85 < cf114d8d4a8d78df272116a745bb43b48cef65f4affected
LinuxLinuxc06e09b76639657f284bfaf1cce29557a2515e85 < 4b09715f1504f1b6e8dff0e9643630610bc05141affected
LinuxLinux5.9affected
LinuxLinux0 < 5.9unaffected
LinuxLinux5.10.214 <= 5.10.*unaffected
LinuxLinux5.15.153 <= 5.15.*unaffected
LinuxLinux6.1.83 <= 6.1.*unaffected
LinuxLinux6.6.23 <= 6.6.*unaffected
LinuxLinux6.7.11 <= 6.7.*unaffected
LinuxLinux6.8.2 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References