PT-2024-5945 · Linux+3 · Linux Kernel+3
Tvrtko Ursulin
·
Published
2024-08-12
·
Updated
2025-09-29
·
CVE-2024-44993
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.3-v8-16k-numa #151
Description
The issue is related to an out-of-bounds read in the
v3d csd job run() function. This happens because the UAPI provides only seven configuration registers, but the code is reading the eighth position of the u32 [7] array. The eighth register exists on V3D 7.1 but is not currently used. To fix this, the code should access only seven positions on the u32 [7] array.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the out-of-bounds read in
v3d csd job run(). As a temporary workaround, consider restricting access to the v3d csd job run() function until a patch is available.Exploit
Fix
Out of bounds Read
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Ubuntu