CVE-2024-38552

🗓️ 19 Jun 2024 13:35:24Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 113 Views🌐 WEB

Linux kernel drm/amd/display vulnerability fixe

Reporter	Title	Published	Views	Family All 184
AstraLinux	Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the DRM/AMD/display components of the Linux operating system allows a hacker to execute arbitrary code.	12 Sep 202400:00	–	bdu_fstec
CNNVD	Linux kernel security vulnerabilities	19 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-38552 drm/amd/display: Fix potential index out of bounds in color transformation function	19 Jun 202413:35	–	cvelist
Debian	[SECURITY] [DLA 3840-1] linux security update	27 Jun 202411:30	–	debian
Debian	[SECURITY] [DSA 5730-1] linux security update	15 Jul 202420:09	–	debian
Debian CVE	CVE-2024-38552	19 Jun 202413:35	–	debiancve
Tenable Nessus	Debian dla-3840 : hyperv-daemons - security update	27 Jun 202400:00	–	nessus
Tenable Nessus	Debian dsa-5730 : affs-modules-5.10.0-29-4kc-malta-di - security update	16 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-2394)	12 Sep 202400:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange4.16–4.19.316

linux linux_kernelRange4.20–5.4.278

linux linux_kernelRange5.5–5.10.219

linux linux_kernelRange5.11–5.15.161

linux linux_kernelRange5.16–6.1.93

linux linux_kernelRange6.2–6.6.33

linux linux_kernelRange6.7–6.8.12

linux linux_kernelRange6.9–6.9.3

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/display/dc/dcn10/dcn10_cm_common.c"
    ],
    "versions": [
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "604c506ca43fce52bb882cff9c1fdf2ec3b4029c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "e280ab978c81443103d7c61bdd1d8d708cf6ed6d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "04bc4d1090c343025d69149ca669a27c5b9c34a7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "ced9c4e2289a786b8fa684d8893b7045ea53ef7e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "98b8a6bfd30d07a19cfacdf82b50f84bf3360869",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "4e8c8b37ee84b3b19c448d2b8e4c916d2f5b9c86",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "123edbae64f4d21984359b99c6e79fcde31c6123",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "7226ddf3311c5e5a7726ad7d4e7b079bb3cfbb29",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b629596072e5fa901c84f9e88d845a696ee32942",
        "lessThan": "63ae548f1054a0b71678d0349c7dc9628ddd42ca",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/display/dc/dcn10/dcn10_cm_common.c"
    ],
    "versions": [
      {
        "version": "4.16",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.16",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.316",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.278",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.219",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.161",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.93",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.33",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8.12",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.9.3",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/123edbae64f4d21984359b99c6e79fcde31c6123
git	www.git.kernel.org/stable/c/7226ddf3311c5e5a7726ad7d4e7b079bb3cfbb29
git	www.git.kernel.org/stable/c/63ae548f1054a0b71678d0349c7dc9628ddd42ca
git	www.git.kernel.org/stable/c/e280ab978c81443103d7c61bdd1d8d708cf6ed6d
git	www.git.kernel.org/stable/c/604c506ca43fce52bb882cff9c1fdf2ec3b4029c
git	www.git.kernel.org/stable/c/4e8c8b37ee84b3b19c448d2b8e4c916d2f5b9c86
git	www.git.kernel.org/stable/c/04bc4d1090c343025d69149ca669a27c5b9c34a7
git	www.git.kernel.org/stable/c/ced9c4e2289a786b8fa684d8893b7045ea53ef7e
git	www.git.kernel.org/stable/c/98b8a6bfd30d07a19cfacdf82b50f84bf3360869
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00020.html

Parameter	Position	Path	Description	CWE
i	path	drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c	Potential index out of bounds in color transformation function cm_helper_translate_curve_to_hw_format; if i exceeds TRANSFER_FUNC_POINTS, function returns false and logs an error.	CWE-129
output_tf->tf_pts.red	path	drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c	Potential index out of bounds in color transformation function cm_helper_translate_curve_to_hw_format; if i exceeds TRANSFER_FUNC_POINTS, function returns false and logs an error.	CWE-129
output_tf->tf_pts.green	path	drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c	Potential index out of bounds in color transformation function cm_helper_translate_curve_to_hw_format; if i exceeds TRANSFER_FUNC_POINTS, function returns false and logs an error.	CWE-129
output_tf->tf_pts.blue	path	drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c	Potential index out of bounds in color transformation function cm_helper_translate_curve_to_hw_format; if i exceeds TRANSFER_FUNC_POINTS, function returns false and logs an error.	CWE-129

17 Jun 2026 07:40Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.8

EPSS0.00297

SSVC

CWE-129