Riskcovery

CVE-2024-27008

drm: nv04: Fix out of bounds access

State
Published
Severity
Not scored
Published
May 1, 2024
Updated
May 11, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm: nv04: Fix out of bounds access

When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or) is used as index there. The 'or' argument of fabricate_dcb_output() must be interpreted as a number of bit to set, not value.

Utilize macros from 'enum nouveau_or' in calls instead of hardcoding.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2e5702aff39532662198459726c624d5eadbdd78 to before c2b97f26f081ceec3298151481687071075a25cbAffected
  • 2e5702aff39532662198459726c624d5eadbdd78 to before 5050ae879a828d752b439e3827aac126709da6d1Affected
  • 2e5702aff39532662198459726c624d5eadbdd78 to before 097c7918fcfa1dee233acfd1f3029f00c3bc8062Affected
  • 2e5702aff39532662198459726c624d5eadbdd78 to before df0991da7db846f7fa4ec6740350f743d3b69b04Affected
  • 2e5702aff39532662198459726c624d5eadbdd78 to before 5fd4b090304e450aa0e7cc9cc2b4873285c6faceAffected
  • 2e5702aff39532662198459726c624d5eadbdd78 to before 6690cc2732e2a8d0eaca44dcbac032a4b0148042Affected
  • 2e5702aff39532662198459726c624d5eadbdd78 to before 26212da39ee14a52c76a202c6ae5153a84f579a5Affected
  • 2e5702aff39532662198459726c624d5eadbdd78 to before cf92bb778eda7830e79452c6917efa8474a30c1eAffected
LinuxLinux
  • 2.6.38Affected
  • before 2.6.38Not affected
  • 4.19.313 through 4.19.*Not affected
  • 5.4.275 through 5.4.*Not affected
  • 5.10.216 through 5.10.*Not affected
  • 5.15.157 through 5.15.*Not affected
  • 6.1.88 through 6.1.*Not affected
  • 6.6.29 through 6.6.*Not affected
  • 6.8.8 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.