CVE-2024-49984

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Prevent out of bounds access in performance query extensions

Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be copied into.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbae7cb5d68001a8d4ceec5964dda74bb9aab7220 < 3e50d72abe50204c7b19784a66e86da29dde32c2affected
LinuxLinuxbae7cb5d68001a8d4ceec5964dda74bb9aab7220 < d9536f16be3970c170571efa707c13cd089c774eaffected
LinuxLinuxbae7cb5d68001a8d4ceec5964dda74bb9aab7220 < f32b5128d2c440368b5bf3a7a356823e235caabbaffected
LinuxLinux6.8affected
LinuxLinux0 < 6.8unaffected
LinuxLinux6.10.14 <= 6.10.*unaffected
LinuxLinux6.11.3 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References