CVE-2024-49984: drm/v3d: Prevent out of bounds access in performance query extensions
In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Prevent out of bounds access in performance query extensions
Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be copied into.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49984?
CVE-2024-49984 is classified as a high severity vulnerability due to potential out of bounds access.
How do I fix CVE-2024-49984?
To resolve CVE-2024-49984, update the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.9-1, or 6.12.10-1.
Which systems are affected by CVE-2024-49984?
CVE-2024-49984 affects various versions of the Linux kernel ranging between 6.8 and 6.10.4 as well as specific Debian package versions.
What does CVE-2024-49984 affect in the Linux kernel?
CVE-2024-49984 affects the performance query extensions in the Linux kernel's DRM subsystem.
Is there a workaround for CVE-2024-49984?
There is no universal workaround for CVE-2024-49984, and applying the relevant updates is the recommended action.