CVE-2024-27008

2024-05-0106:15:19

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux kernel

vulnerability

out of bounds access

fix

drm

nv04

dac_users

linux verification center

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm: nv04: Fix out of bounds access

When Output Resource (dcb->or) value is assigned in
fabricate_dcb_output(), there may be out of bounds access to
dac_users array in case dcb->or is zero because ffs(dcb->or) is
used as index there.
The ‘or’ argument of fabricate_dcb_output() must be interpreted as a
number of bit to set, not value.

Utilize macros from ‘enum nouveau_or’ in calls instead of hardcoding.

Found by Linux Verification Center (linuxtesting.org) with SVACE.