CVE-2023-52649 drm/vkms: Avoid reading beyond LUT array

2024-05-0112:53:08

Linux

github.com

linux kernel

vulnerability

drm/vkms

AI Score

6.8

Confidence

Low

EPSS

Percentile

15.5%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm/vkms: Avoid reading beyond LUT array

When the floor LUT index (drm_fixp2int(lut_index) is the last
index of the array the ceil LUT index will point to an entry
beyond the array. Make sure we guard against it and use the
value of the floor LUT index.

v3:

Drop bits from commit description that didn’t contribute
anything of value

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "db1f254f2cfa",
        "lessThan": "9556c1676730",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "db1f254f2cfa",
        "lessThan": "046c1184ce60",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "db1f254f2cfa",
        "lessThan": "92800aaeff51",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "db1f254f2cfa",
        "lessThan": "2fee84030d12",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/gpu/drm/vkms/vkms_composer.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.6"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.6",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.23",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.7.11",
        "versionType": "custom",
        "lessThanOrEqual": "6.7.*"
      },
      {
        "status": "unaffected",
        "version": "6.8.2",
        "versionType": "custom",
        "lessThanOrEqual": "6.8.*"
      },
      {
        "status": "unaffected",
        "version": "6.9",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/gpu/drm/vkms/vkms_composer.c"
    ],
    "defaultStatus": "affected"
  }
]