PT-2024-9914
CVE-2024-26660
·
تاريخ النشر
2024-02-07
·
تاريخ التحديث
2026-07-25
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a buffer overflow error in the
dcn301 stream encoder create function, which is part of the Direct Rendering Manager (DRM) subsystem in the Linux kernel. The error occurs when the eng id is used as an index to access the stream enc regs array, and if eng id is 5, it results in an out-of-bounds access on the stream enc regs array. This could lead to undefined behavior. The vulnerability is related to the lack of bounds checking for stream encoder creation in DCN301.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾