CVE-2024-44993

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.3-v8-16k-numa #151

Description The issue is related to an out-of-bounds read in the v3d csd job run() function. This happens because the UAPI provides only seven configuration registers, but the code is reading the eighth position of the u32 [7] array. The eighth register exists on V3D 7.1 but is not currently used. To fix this, the code should access only seven positions on the u32 [7] array.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the out-of-bounds read in v3d csd job run(). As a temporary workaround, consider restricting access to the v3d csd job run() function until a patch is available.