#VU98905 Out-of-bounds read in Linux kernel - CVE-2024-49969
Vulnerability identifier: #VU98905
Vulnerability risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-49969
CWE-ID:
CWE-125
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the cm3_helper_translate_curve_to_hw_format() function in drivers/gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel: All versions
External links
https://git.kernel.org/stable/c/7ab69af56a23859b647dee69fa1052c689343621
https://git.kernel.org/stable/c/c13f9c62015c56a938304cef6d507227ea3e0039
https://git.kernel.org/stable/c/0f1e222a4b41d77c442901d166fbdca967af0d86
https://git.kernel.org/stable/c/929506d5671419cffd8d01e9a7f5eae53682a838
https://git.kernel.org/stable/c/578422ddae3d13362b64e77ef9bab98780641631
https://git.kernel.org/stable/c/b9d8b94ec7e67f0cae228c054f77b73967c389a3
https://git.kernel.org/stable/c/d81873f9e715b72d4f8d391c8eb243946f784dfc
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
