CVE-2024-56697

drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()

Medium · published December 28, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()

Fix two issues with memory allocation in amdgpu_discovery_get_nps_info()

for mem_ranges:

- Add a check for allocation failure to avoid dereferencing a null

pointer.

- As suggested by Christophe, use kvcalloc() for memory allocation,

which checks for multiplication overflow.

Additionally, assign the output parameters nps_type and range_cnt after

the kvcalloc() call to prevent modifying the output parameters in case

of an error return.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Published
2024-12-28T09:46Z
EPSS history
Timeline
  • 28 DEC 09:46Z
    drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()
    cvelistv5