PT-2024-3400 · Linux+2 · Linux Kernel+2

Published 2024-01-31 · Updated 2026-03-14 · CVE-2024-26913

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a missing odm calculation for pipe split policy determination in the Linux kernel's drm/amd/display module, specifically affecting the dcn35 8k30. This missing calculation causes an underflow/corruption issue. The get scaler data for plane() function in the drivers/gpu/drm/amd/display/dc/dml2/dml2 translation helper.c module of the AMD video driver is also associated with an integer overflow vulnerability. This could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-10855

AZL-40112

AZL-40159

BDU:2024-03672

CVE-2024-26913

ECHO-5047-4428-BB74

SUSE-SU-2025:20028-1

Affected Products

Alt Linux

Debian

Linux Kernel

References · 1829

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26913.json · Exploit
• https://git.kernel.org/stable/c/faf51b201bc42adf500945732abb6220c707d6f3 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-26913 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03672 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2024-26913 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2024-0905SE18MD · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-26913 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-26913 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26913 · Vendor Advisory
• https://git.kernel.org/stable/c/cdbe0be8874c63bca85b8c38e5b1eecbdd18df31 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26913 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26913 · Security Note
• https://osv.dev/vulnerability/AZL-40159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26913 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26913 · Security Note