CVE-2024-49970

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A buffer overflow error has been resolved in the Linux kernel, specifically in the dcn401 stream encoder create function. The issue arises from an out-of-bounds access on the stream enc regs array, which is initialized with four elements and has valid indices of 0, 1, 2, and 3. If the eng id is used as an index and is set to 5, it results in an out-of-bounds access, leading to undefined behavior. The error was found by smatch in the dcn401 resource.c file.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.