CVE-2023-52649 drm/vkms: Avoid reading beyond LUT array

2024-05-0112:53:08

Linux

www.cve.org

linux kernel

vulnerability

resolved

drm/vkms

lut array

security

cve-2023-52649

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm/vkms: Avoid reading beyond LUT array

When the floor LUT index (drm_fixp2int(lut_index) is the last
index of the array the ceil LUT index will point to an entry
beyond the array. Make sure we guard against it and use the
value of the floor LUT index.

v3:

Drop bits from commit description that didn’t contribute
anything of value

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/vkms/vkms_composer.c"
    ],
    "versions": [
      {
        "version": "db1f254f2cfa",
        "lessThan": "9556c1676730",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "db1f254f2cfa",
        "lessThan": "046c1184ce60",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "db1f254f2cfa",
        "lessThan": "92800aaeff51",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "db1f254f2cfa",
        "lessThan": "2fee84030d12",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/vkms/vkms_composer.c"
    ],
    "versions": [
      {
        "version": "6.6",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.6",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.23",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.11",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.2",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]