SECUFOCUSNOW
Home›CVE index›CVE-2024-27045
Review reviewHigh

CVE-2024-27045

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' Tell snprintf() to store at most 10 bytes in the output buffer instead of 30. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10

CVSS
7.8
EPSS
0.31%
22.9% percentile
CISA KEV
Not listed
Published
2024.05.01
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.31%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' Tell snprintf() to store at most 10 bytes in the output buffer instead of 30. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= c06e09b76639657f284bfaf1cce29557a2515e85 < ff28893c96c5e0927a4da10cd24a3522ca663515, >= c06e09b76639657f284bfaf1cce29557a2515e85 < 440f059837418fac1695b65d3ebc6080d33be877, >= c06e09b76639657f284bfaf1cce29557a2515e85 < d346b3e5b25c95d504478507eb867cd3818775ab, >= c06e09b76639657f284bfaf1cce29557a2515e85 < ad76fd30557d6a106c481e4606a981221ca525f7, >= c06e09b76639657f284bfaf1cce29557a2515e85 < eb9327af3621d26b1d83f767c97a3fe8191a3a65, >= c06e09b76639657f284bfaf1cce29557a2515e85 < cf114d8d4a8d78df272116a745bb43b48cef65f4, >= c06e09b76639657f284bfaf1cce29557a2515e85 < 4b09715f1504f1b6e8dff0e9643630610bc05141, >= 5.9, >= 5.9 < 5.10.214, >= 5.11 < 5.15.153, >= 5.16 < 6.1.83, >= 6.2 < 6.6.23, >= 6.7 < 6.7.11, >= 6.8 < 6.8.2
Fixed versions
5.10.214, 5.15.153, 6.1.83, 6.6.23, 6.7.11, 6.8.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-120