The vulnerability of the function cm3_helper_translate_curve_toHW_format() in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c, which can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 15 Apr 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Buffer overflow in AMD driver function cm3_helper_translate_curve_to_hw_format due to unchecked copy.

Reporter	Title	Published	Views	Family All 222
AstraLinux	Astra Linux - уязвимость в linux, linux-5.10, linux-5.15, linux-6.1	20 May 202605:53	–	astralinux
Tenable Nessus	Azure Linux 3.0 Security Update: kernel (CVE-2024-49969)	10 Feb 202500:00	–	nessus
Tenable Nessus	Debian dla-4008 : linux-config-6.1 - security update	3 Jan 202500:00	–	nessus
Tenable Nessus	Debian dla-4075 : ata-modules-5.10.0-29-armmp-di - security update	1 Mar 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kernel (CVE-2024-49969)	13 Dec 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12887)	18 Dec 202400:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2024-4.0-0711	15 Nov 202400:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2024-5.0-0393	12 Nov 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:3983-1)	14 Nov 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:3984-1)	14 Nov 202400:00	–	nessus

Vulners

Node

novell opensuse_leapMatch15.5

OR

novell opensuse_leapMatch15.6

OR

canonical ubuntuMatch24.10

Source	Link
git	www.git.kernel.org/stable/c/c13f9c62015c56a938304cef6d507227ea3e0039
git	www.git.kernel.org/stable/c/7ab69af56a23859b647dee69fa1052c689343621
git	www.git.kernel.org/stable/c/0f1e222a4b41d77c442901d166fbdca967af0d86
git	www.git.kernel.org/stable/c/b9d8b94ec7e67f0cae228c054f77b73967c389a3
git	www.git.kernel.org/stable/c/929506d5671419cffd8d01e9a7f5eae53682a838
git	www.git.kernel.org/stable/c/d81873f9e715b72d4f8d391c8eb243946f784dfc
git	www.git.kernel.org/stable/c/578422ddae3d13362b64e77ef9bab98780641631
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024102133-CVE-2024-49969-cf83@gregkh/
git	www.git.kernel.org/linus/d81873f9e715b72d4f8d391c8eb243946f784dfc

24 Oct 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 26.8

CVSS 37.8

EPSS0.00014

amd driver buffer overflow kernel module curve translation hardware format data confidentiality data integrity