PT-2024-33856
CVE-2024-50016
·
Published
2024-10-21
·
Updated
2026-10-09
Description by
CVSS 3.1
7.1
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
The issue is related to an integer overflow in the Linux kernel's DRM/AMD display module. Specifically, the
sampling rate variable, which is an uint8 t, is assigned an unsigned int, leading to a potential overflow. Additionally, the LINK QUAL PATTERN SET has a size of 2 bits and should only be assigned a value less than or equal to 4. This resolves 2 INTEGER OVERFLOW issues reported by Coverity.Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the assignment of values to
sampling rate and LINK QUAL PATTERN SET to prevent overflow. Found an issue in the description? Have something to add? Feel free to write us 👾