CVE-2024-42228

drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

published July 30, 2024

CVSS
—
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001.

V2: To really improve the handling we would actually

need to have a separate value of 0xffffffff.(Christian)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Published
2024-07-30T07:47Z
EPSS history
Timeline
  • 30 JUL 07:47Z
    drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
    cvelistv5