First published: Mon Oct 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow assignment in link_dp_cts sampling_rate is an uint8_t but is assigned an unsigned int, and thus it can overflow. As a result, sampling_rate is changed to uint32_t. Similarly, LINK_QUAL_PATTERN_SET has a size of 2 bits, and it should only be assigned to a value less or equal than 4. This fixes 2 INTEGER_OVERFLOW issues reported by Coverity.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | <6.6.55 | |
Linux Kernel | >=6.7<6.10.14 | |
Linux Kernel | >=6.11<6.11.3 | |
debian/linux | <=5.10.223-1<=5.10.226-1<=6.1.123-1<=6.1.128-1 | 6.12.12-1 6.12.15-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-50016 is considered a moderate severity vulnerability due to potential overflow issues in the Linux kernel.
To fix CVE-2024-50016, upgrade to the recommended Linux kernel versions 6.12.12-1 or 6.12.15-1.
CVE-2024-50016 affects Linux kernel versions between 6.7 and 6.10.14 as well as specific versions up to 6.11.3.
CVE-2024-50016 impacts the AMD display functionality within the Linux kernel, specifically the dp_cts link.
CVE-2024-50016 is relevant to multiple Linux distributions that utilize the affected versions of the Linux kernel.