PT-2024-9841 · Linux · Linux Kernel

Published 2024-02-20 · Updated 2024-08-01 · CVE-2024-26797

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a potential buffer overflow in the map hw resources function. The function was accessing arrays using an index that could potentially be greater than the size of the arrays, leading to a buffer overflow. A check has been added to ensure that the index is within the bounds of the arrays. If the index is out of bounds, an error message is printed and execution continues with just ignoring extra data early to prevent the buffer overflow. The map hw resources function is located in the drivers/gpu/drm/amd/amdgpu/../display/dc/dml2/dml2 wrapper.c file. The vulnerable variables are dml2->v20.scratch.dml to dc pipe mapping.disp cfg to stream id and dml2->v20.scratch.dml to dc pipe mapping.disp cfg to plane id.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-11619

CVE-2024-26797

Affected Products

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26797.json · Exploit
• https://ubuntu.com/security/CVE-2024-26797 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11619 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26797 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-26797 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26797 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-26797 · Security Note
• https://git.kernel.org/stable/c/0f8ca019544a252d1afb468ce840c6dcbac73af4 · Patch
• https://git.kernel.org/stable/c/50a6302cf881f67f1410461a68fe9eabd00ff31d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-26797 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-26797 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26797 · Vendor Advisory
• https://vuldb.com/?id.259336 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26797 · Note
• https://docs.bell-sw.com/security/cves/CVE-2024-26797 · Note