CVE-2024-27045
drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' Tell snprintf() to store at most 10 bytes in the output buffer instead of 30. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.9
References 7
git.kernel.org
- stable/c/ff28893c96c5e0927a4da10cd24a3522ca663515
- stable/c/440f059837418fac1695b65d3ebc6080d33be877
- stable/c/d346b3e5b25c95d504478507eb867cd3818775ab
- stable/c/ad76fd30557d6a106c481e4606a981221ca525f7
- stable/c/eb9327af3621d26b1d83f767c97a3fe8191a3a65
- stable/c/cf114d8d4a8d78df272116a745bb43b48cef65f4
- stable/c/4b09715f1504f1b6e8dff0e9643630610bc05141