PT-2024-33856 · Linux+5 · Linux Kernel+5

Published

2024-10-21

·

Updated

2026-05-26

·

CVE-2024-50016

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58
Description: The issue is related to an integer overflow in the Linux kernel's DRM/AMD display module. Specifically, the sampling rate variable, which is an uint8 t, is assigned an unsigned int, leading to a potential overflow. Additionally, the LINK QUAL PATTERN SET has a size of 2 bits and should only be assigned a value less than or equal to 4. This resolves 2 INTEGER OVERFLOW issues reported by Coverity.
Recommendations: For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the assignment of values to sampling rate and LINK QUAL PATTERN SET to prevent overflow.

Fix

Integer Overflow

Weakness Enumeration

Related Identifiers

ALT-PU-2024-14046
BDU:2025-07975
CVE-2024-50016
MGASA-2024-0344
MGASA-2024-0345
OESA-2024-2367
OESA-2024-2368
OESA-2024-2369
OESA-2024-2371
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
OPENSUSE-SU-2025_0117-1
OPENSUSE-SU-2025_0153-1
OPENSUSE-SU-2025_0154-1
SUSE-SU-2025:0117-1
SUSE-SU-2025:0153-1
SUSE-SU-2025:0154-1
SUSE-SU-2025:0289-1
SUSE-SU-2025:20165-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20248-1
SUSE-SU-2025:20249-1
USN-7276-1
USN-7277-1
USN-7301-1
USN-7303-1
USN-7303-2
USN-7303-3
USN-7304-1
USN-7310-1
USN-7311-1
USN-7384-1
USN-7384-2
USN-7385-1
USN-7386-1
USN-7403-1
USN-7468-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu