PT-2024-7832 · Linux+6 · Linux Kernel+6
Published
2024-04-15
·
Updated
2025-09-29
·
CVE-2024-27008
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to an out of bounds access in the Linux kernel's drm component, specifically in the nv04 module. When the Output Resource (
dcb->or) value is assigned in fabricate dcb output(), there may be out of bounds access to the dac users array if dcb->or is zero, because ffs(dcb->or) is used as an index. The or argument of fabricate dcb output() must be interpreted as a number of bits to set, not a value. Utilizing macros from enum nouveau or in calls instead of hardcoding can resolve the issue. The vulnerability was found by the Linux Verification Center with SVACE.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu