PT-2024-33856
CVE-2024-50016
·
تاريخ النشر
2024-10-21
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
The issue is related to an integer overflow in the Linux kernel's DRM/AMD display module. Specifically, the
sampling rate variable, which is an uint8 t, is assigned an unsigned int, leading to a potential overflow. Additionally, the LINK QUAL PATTERN SET has a size of 2 bits and should only be assigned a value less than or equal to 4. This resolves 2 INTEGER OVERFLOW issues reported by Coverity.Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the assignment of values to
sampling rate and LINK QUAL PATTERN SET to prevent overflow. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾