CVE-2024-42264CWE-125

CVE-2024-42264

High · published August 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Prevent out of bounds access in performance query extensions

Check that the number of perfmons userspace is passing in the copy and

reset extensions is not greater than the internal kernel storage where

the ids will be copied into.

(cherry picked from commit f32b5128d2c440368b5bf3a7a356823e235caabb)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.8th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-08-17T13:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.10.46.10.4
linux/linux_kernelall versions—
References (2)
https://git.kernel.org/stable/c/6ce9efd12ae81cf46bf44eb0348594558dfbb9d2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/73ad583bd4938bf37d2709fc36901eb6f22f2722 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 17 AUG 08:54Z
    drm/v3d: Prevent out of bounds access in performance query extensions
    cvelistv5