CVE-2023-52649: drm/vkms: Avoid reading beyond LUT array
In the Linux kernel, the following vulnerability has been resolved:
drm/vkms: Avoid reading beyond LUT array
The Linux kernel CVE team has assigned CVE-2023-52649 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050109-CVE-2023-52649-4614@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
drm/vkms: Avoid reading beyond LUT array
When the floor LUT index (drmfixp2int(lutindex) is the last index of the array the ceil LUT index will point to an entry beyond the array. Make sure we guard against it and use the value of the floor LUT index.
v3: - Drop bits from commit description that didn't contribute anything of value
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52649?
CVE-2023-52649 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52649?
To fix CVE-2023-52649, ensure your Linux kernel is updated to version 6.6.23, 6.7.11, 6.8.2, or 6.9, or the respective patched versions from Debian.
What software versions are affected by CVE-2023-52649?
CVE-2023-52649 affects multiple Linux kernel versions prior to 6.6.23, 6.7.11, 6.8.2, and 6.9.
What type of vulnerability is CVE-2023-52649?
CVE-2023-52649 is a vulnerability associated with improper array boundary checks in the Linux kernel.
Is there a workaround for CVE-2023-52649?
There is no officially recommended workaround for CVE-2023-52649; updating to the patched versions is the best approach.