CVE-2024-50282
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
Avoid a possible buffer overflow if size is larger than 4K.
(cherry picked from commit f5d873f5825b40d886d03bd2aede91d4cf002434)
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 673bdb4200c092692f83b5f7ba3df57021d52d29 | affected |
| Linux | Linux | d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 8906728f2fbd6504cb488f4afdd66af28f330a7a | affected |
| Linux | Linux | d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 2faaee36e6e30f9efc7fa6bcb0bdcbe05c23f51f | affected |
| Linux | Linux | d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 4d75b9468021c73108b4439794d69e892b1d24e3 | affected |
| Linux | Linux | 4.2 | affected |
| Linux | Linux | 0 < 4.2 | unaffected |
| Linux | Linux | 4.19.324 <= 4.19.* | unaffected |
| Linux | Linux | 6.6.61 <= 6.6.* | unaffected |
| Linux | Linux | 6.11.8 <= 6.11.* | unaffected |
| Linux | Linux | 6.12 <= * | unaffected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
CVE Program Container
Additional References
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
References
- https://git.kernel.org/stable/c/673bdb4200c092692f83b5f7ba3df57021d52d29
- https://git.kernel.org/stable/c/8906728f2fbd6504cb488f4afdd66af28f330a7a
- https://git.kernel.org/stable/c/2faaee36e6e30f9efc7fa6bcb0bdcbe05c23f51f
- https://git.kernel.org/stable/c/4d75b9468021c73108b4439794d69e892b1d24e3
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.