Review reviewHigh

CVE-2024-53108

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN: [ 27.804016] BUG: KASAN: slab-out-of-bounds in amdgpu_dm_update_freesync_caps+0xefa/0x17a0 [amdgpu] [ 27.804788] Read of size 1 at addr ffff8881647fdb00 by task systemd-udevd/383 ... [ 27.821207] Memory state around the buggy address: [ 27.821215] ffff8881647fda00: 00 00 00 00 00 00 00 00 00 00 00 00 00...

CVSS: 7.1
EPSS: -
CISA KEV: Not listed
Published: 2024.12.02

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= ec8e59cb4e0c1a52d5a541fff9dcec398b48f7b4 < 0a326fbc8f72a320051f27328d4d4e7abdfe68d7, >= ec8e59cb4e0c1a52d5a541fff9dcec398b48f7b4 < 8db867061f4c76505ad62422b65d666b45289217, >= ec8e59cb4e0c1a52d5a541fff9dcec398b48f7b4 < 16dd2825c23530f2259fc671960a3a65d2af69bd, >= 6.6, < 6.6.63, >= 6.7 < 6.11.10, 6.12
Fixed versions: 6.6.63, 6.11.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE: CWE-125