PT-2024-33856 · Linux+5 · Linux Kernel+5
CVE-2024-50016
·
Published
2024-10-21
·
Updated
2026-05-26
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
The issue is related to an integer overflow in the Linux kernel's DRM/AMD display module. Specifically, the
sampling rate variable, which is an uint8 t, is assigned an unsigned int, leading to a potential overflow. Additionally, the LINK QUAL PATTERN SET has a size of 2 bits and should only be assigned a value less than or equal to 4. This resolves 2 INTEGER OVERFLOW issues reported by Coverity.Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the assignment of values to
sampling rate and LINK QUAL PATTERN SET to prevent overflow.Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu