CVE-2024-47661CWE-190

CVE-2024-47661

Medium · published October 9, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Avoid overflow from uint32_t to uint8_t

[WHAT & HOW]

dmub_rb_cmd's ramping_boundary has size of uint8_t and it is assigned

0xFFFF. Fix it by changing it to uint8_t with value of 0xFF.

This fixes 2 INTEGER_OVERFLOW issues reported by Coverity.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-10-09T19:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.10.96.10.9
References (3)
https://git.kernel.org/stable/c/30d1b783b6eeaf49d311a072c70d618d993d01ec · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6fc6ef4cd858a45479fed881e326d2449a2c9e51 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d6b54900c564e35989cf6813e4071504fa0a90e0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 09 OCT 14:05Z
    drm/amd/display: Avoid overflow from uint32_t to uint8_t
    cvelistv5