CVE-2024-26817: amdkfd: use calloc instead of kzalloc to avoid integer overflow
In the Linux kernel, the following vulnerability has been resolved:
amdkfd: use calloc instead of kzalloc to avoid integer overflow
This uses calloc instead of doing the multiplication which might overflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26817?
The severity of CVE-2024-26817 is considered to be moderate due to potential integer overflow issues.
How do I fix CVE-2024-26817?
To fix CVE-2024-26817, you should update to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What software is affected by CVE-2024-26817?
CVE-2024-26817 affects the Linux kernel versions prior to the specified patched versions.
What type of vulnerability is CVE-2024-26817?
CVE-2024-26817 is an integer overflow vulnerability in the amdkfd component of the Linux kernel.
Is CVE-2024-26817 related to memory allocation?
Yes, CVE-2024-26817 is related to memory allocation, specifically the use of calloc to prevent integer overflow.