7 CVE-2024-42228

Patch
 

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian)
https://nvd.nist.gov/vuln/detail/CVE-2024-42228

Categories

CWE-908 : Use of Uninitialized Resource
When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.

References


 

CPE

cpe start end
Configuration 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 6.6.39
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* >= 6.7 < 6.9.9


REMEDIATION


Patch

Url
https://git.kernel.org/stable/c/855ae72c20310e5402b2317fc537d911e87537ef
https://git.kernel.org/stable/c/88a9a467c548d0b3c7761b4fd54a68e70f9c0944
https://git.kernel.org/stable/c/f8f120b3de48b8b6bdf8988a9b334c2d61c17440


EXPLOITS


Exploit-db.com

id description date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
No known exploits


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
No entry