PT-2025-8816 · Linux+1 · Linux Kernel+1

Published 2025-02-27 · Updated 2025-02-28 · CVE-2024-52557

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential integer overflow issue was found in the Linux kernel, specifically in the zynqmp dp rate get() function. This issue arises when the expression drm dp bw code to link rate(dp->test.bw code) * 10000 is evaluated using 32-bit, which could lead to an integer overflow. The fix involves changing the constant to a compatible 64-bit type.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2024-52557

Affected Products

Astra Linux

Linux Kernel

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52557.json · Exploit
• https://git.kernel.org/stable/c/67a615c5cb6dc33ed35492dc0d67e496cbe8de68 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-52557 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-52557 · Vendor Advisory
• https://git.kernel.org/stable/c/325d889c5403ba20a24097f64c32d27ab993c2c3 · Patch
• https://ubuntu.com/security/CVE-2024-52557 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-52557 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52557 · Security Note
• https://t.me/cvenotify/112585 · Telegram Post
• https://git.kernel.org/linus/67a615c5cb6dc33ed35492dc0d67e496cbe8de68 · Note
• https://twitter.com/CVEnew/status/1895260259146408403 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note