CVE-2024-49984CWE-787

CVE-2024-49984

High · published October 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Prevent out of bounds access in performance query extensions

Check that the number of perfmons userspace is passing in the copy and

reset extensions is not greater than the internal kernel storage where

the ids will be copied into.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-10-21T22:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.10.46.10.4
linux/linux_kernel≥ 6.10.5, < 6.10.146.10.14
linux/linux_kernel≥ 6.11, < 6.11.36.11.3
References (3)
https://git.kernel.org/stable/c/3e50d72abe50204c7b19784a66e86da29dde32c2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d9536f16be3970c170571efa707c13cd089c774e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f32b5128d2c440368b5bf3a7a356823e235caabb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 21 OCT 18:02Z
    drm/v3d: Prevent out of bounds access in performance query extensions
    cvelistv5