CVE-2024-38549

drm/mediatek: Add 0 size check to mtk_drm_gem_obj

published June 19, 2024

CVSS
—
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Add 0 size check to mtk_drm_gem_obj

Add a check to mtk_drm_gem_init if we attempt to allocate a GEM object

of 0 bytes. Currently, no such check exists and the kernel will panic if

a userspace application attempts to allocate a 0x0 GBM buffer.

Tested by attempting to allocate a 0x0 GBM buffer on an MT8188 and

verifying that we now return EINVAL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Published
2024-06-19T13:35Z
EPSS history
Timeline
  • 19 JUN 13:35Z
    drm/mediatek: Add 0 size check to mtk_drm_gem_obj
    cvelistv5