CVE-2024-26660

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a buffer overflow error in the dcn301 stream encoder create function, which is part of the Direct Rendering Manager (DRM) subsystem in the Linux kernel. The error occurs when the eng id is used as an index to access the stream enc regs array, and if eng id is 5, it results in an out-of-bounds access on the stream enc regs array. This could lead to undefined behavior. The vulnerability is related to the lack of bounds checking for stream encoder creation in DCN301.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.