CVE-2024-27008

drm: nv04: Fix out of bounds access

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm: nv04: Fix out of bounds access

When Output Resource (dcb->or) value is assigned in

fabricate_dcb_output(), there may be out of bounds access to

dac_users array in case dcb->or is zero because ffs(dcb->or) is

used as index there.

The 'or' argument of fabricate_dcb_output() must be interpreted as a

number of bit to set, not value.

Utilize macros from 'enum nouveau_or' in calls instead of hardcoding.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.1th percentile
Published
2024-05-01T05:29Z
EPSS history
Timeline
  • 01 MAY 05:29Z
    drm: nv04: Fix out of bounds access
    cvelistv5