CVE-2024-38552: drm/amd/display: Fix potential index out of bounds in color transformation function
First published: Wed Jun 19 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes index out of bounds issue in the color transformation function. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, an error message is logged and the function returns false to indicate an error. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:405 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:406 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:407 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=4.16<4.19.316 | |
| Linux Kernel | >=4.20<5.4.278 | |
| Linux Kernel | >=5.5<5.10.219 | |
| Linux Kernel | >=5.11<5.15.161 | |
| Linux Kernel | >=5.16<6.1.93 | |
| Linux Kernel | >=6.2<6.6.33 | |
| Linux Kernel | >=6.7<6.8.12 | |
| Linux Kernel | >=6.9<6.9.3 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.16-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/04bc4d1090c343025d69149ca669a27c5b9c34a7
- https://git.kernel.org/stable/c/123edbae64f4d21984359b99c6e79fcde31c6123
- https://git.kernel.org/stable/c/4e8c8b37ee84b3b19c448d2b8e4c916d2f5b9c86
- https://git.kernel.org/stable/c/604c506ca43fce52bb882cff9c1fdf2ec3b4029c
- https://git.kernel.org/stable/c/63ae548f1054a0b71678d0349c7dc9628ddd42ca
- https://git.kernel.org/stable/c/7226ddf3311c5e5a7726ad7d4e7b079bb3cfbb29
- https://git.kernel.org/stable/c/98b8a6bfd30d07a19cfacdf82b50f84bf3360869
- https://git.kernel.org/stable/c/ced9c4e2289a786b8fa684d8893b7045ea53ef7e
- https://git.kernel.org/stable/c/e280ab978c81443103d7c61bdd1d8d708cf6ed6d
- https://launchpad.net/bugs/cve/CVE-2024-38552
- https://git.kernel.org/linus/63ae548f1054a0b71678d0349c7dc9628ddd42ca
- https://security-tracker.debian.org/tracker/CVE-2024-38552
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552
- https://nvd.nist.gov/vuln/detail/CVE-2024-38552
- https://ubuntu.com/security/CVE-2024-38552
Frequently Asked Questions
What is the severity of CVE-2024-38552?
CVE-2024-38552 has a medium severity level due to potential index out of bounds, which could lead to application crashes.
How do I fix CVE-2024-38552?
To fix CVE-2024-38552, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What are the affected software versions for CVE-2024-38552?
CVE-2024-38552 affects various versions of the Linux kernel, specifically those within the ranges 4.16 to 4.19.316, 4.20 to 5.4.278, and several others up to 6.9.3.
What causes CVE-2024-38552?
CVE-2024-38552 is caused by an index out of bounds issue in the color transformation function of the Linux kernel.
Is CVE-2024-38552 exploitable?
Yes, CVE-2024-38552 could be exploited under certain conditions that cause the index to exceed its bounds, potentially leading to system instability.
- agent/title
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/remedy
- agent/references
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/tags
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.16
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.9
- package-manager/debian