CVE - CVE-2024-27008

CVE-ID
CVE-2024-27008	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or) is used as index there. The 'or' argument of fabricate_dcb_output() must be interpreted as a number of bit to set, not value. Utilize macros from 'enum nouveau_or' in calls instead of hardcoding. Found by Linux Verification Center (linuxtesting.org) with SVACE.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/097c7918fcfa1dee233acfd1f3029f00c3bc8062 URL:https://git.kernel.org/stable/c/097c7918fcfa1dee233acfd1f3029f00c3bc8062 MISC:https://git.kernel.org/stable/c/26212da39ee14a52c76a202c6ae5153a84f579a5 URL:https://git.kernel.org/stable/c/26212da39ee14a52c76a202c6ae5153a84f579a5 MISC:https://git.kernel.org/stable/c/5050ae879a828d752b439e3827aac126709da6d1 URL:https://git.kernel.org/stable/c/5050ae879a828d752b439e3827aac126709da6d1 MISC:https://git.kernel.org/stable/c/5fd4b090304e450aa0e7cc9cc2b4873285c6face URL:https://git.kernel.org/stable/c/5fd4b090304e450aa0e7cc9cc2b4873285c6face MISC:https://git.kernel.org/stable/c/6690cc2732e2a8d0eaca44dcbac032a4b0148042 URL:https://git.kernel.org/stable/c/6690cc2732e2a8d0eaca44dcbac032a4b0148042 MISC:https://git.kernel.org/stable/c/c2b97f26f081ceec3298151481687071075a25cb URL:https://git.kernel.org/stable/c/c2b97f26f081ceec3298151481687071075a25cb MISC:https://git.kernel.org/stable/c/cf92bb778eda7830e79452c6917efa8474a30c1e URL:https://git.kernel.org/stable/c/cf92bb778eda7830e79452c6917efa8474a30c1e MISC:https://git.kernel.org/stable/c/df0991da7db846f7fa4ec6740350f743d3b69b04 URL:https://git.kernel.org/stable/c/df0991da7db846f7fa4ec6740350f743d3b69b04 MLIST:[debian-lts-announce] 20240625 [SECURITY] [DLA 3842-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Assigning CNA
kernel.org
Date Record Created
20240219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)