PT-2024-9066

CVE-2021-47535

·

Published

2024-05-24

·

Updated

2024-12-04

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to the drm/msm/a6xx component of the Linux kernel, where a slab-out-of-bounds error occurs due to insufficient memory allocation for the GMU registers array. This happens when the a6xx get gmu registers() function reads 3 sets of registers, but the memory allocation was not updated accordingly. The error leads to a KASAN warning and can cause a denial of service. The vulnerable function is (a6xx get gmu registers()), and the affected component is the drm/msm/a6xx subsystem.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2024_2185-1
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2185-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
Found an issue in the description? Have something to add? Feel free to write us 👾