CVE-2024-27008

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an out of bounds access in the Linux kernel's drm component, specifically in the nv04 module. When the Output Resource (dcb->or) value is assigned in fabricate dcb output(), there may be out of bounds access to the dac users array if dcb->or is zero, because ffs(dcb->or) is used as an index. The or argument of fabricate dcb output() must be interpreted as a number of bits to set, not a value. Utilizing macros from enum nouveau or in calls instead of hardcoding can resolve the issue. The vulnerability was found by the Linux Verification Center with SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.