PT-2024-9914 · Linux+9 · Linux Kernel+9
Srinivasan Shanmugam
·
Published
2024-02-07
·
Updated
2025-09-29
·
CVE-2024-26660
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a buffer overflow error in the
dcn301 stream encoder create function, which is part of the Direct Rendering Manager (DRM) subsystem in the Linux kernel. The error occurs when the eng id is used as an index to access the stream enc regs array, and if eng id is 5, it results in an out-of-bounds access on the stream enc regs array. This could lead to undefined behavior. The vulnerability is related to the lack of bounds checking for stream encoder creation in DCN301.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu