CVE-2024-38549

drm/mediatek: Add 0 size check to mtk_drm_gem_obj

State: Published
Severity: Not scored
Published: Jun 19, 2024
Updated: May 11, 2026
Reserved: Jun 18, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Add 0 size check to mtk_drm_gem_obj

Add a check to mtk_drm_gem_init if we attempt to allocate a GEM object of 0 bytes. Currently, no such check exists and the kernel will panic if a userspace application attempts to allocate a 0x0 GBM buffer.

Tested by attempting to allocate a 0x0 GBM buffer on an MT8188 and verifying that we now return EINVAL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	119f5173628aa7a0c3cf9db83460d40709e8241d to before 79078880795478d551a05acc41f957700030d364Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before be34a1b351ea7faeb15dde8c44fe89de3980ae67Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before d17b75ee9c2e44d3a3682c4ea5ab713ea6073350Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before 0e3b6f9123726858cac299e1654e3d20424cabe4Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before 13562c2d48c9ee330de1077d00146742be368f05Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before af26ea99019caee1500bf7e60c861136c0bf8594Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before 9489951e3ae505534c4013db4e76b1b5a3151ac7Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before fb4aabdb1b48c25d9e1ee28f89440fd2ce556405Affected 119f5173628aa7a0c3cf9db83460d40709e8241d to before 1e4350095e8ab2577ee05f8c3b044e661b5af9a0Affected
LinuxLinux	4.7Affected before 4.7Not affected 4.19.316 through 4.19.Not affected 5.4.278 through 5.4.Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.8.12 through 6.8.Not affected 6.9.3 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

119f5173628aa7a0c3cf9db83460d40709e8241d to before 79078880795478d551a05acc41f957700030d364Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before be34a1b351ea7faeb15dde8c44fe89de3980ae67Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before d17b75ee9c2e44d3a3682c4ea5ab713ea6073350Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before 0e3b6f9123726858cac299e1654e3d20424cabe4Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before 13562c2d48c9ee330de1077d00146742be368f05Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before af26ea99019caee1500bf7e60c861136c0bf8594Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before 9489951e3ae505534c4013db4e76b1b5a3151ac7Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before fb4aabdb1b48c25d9e1ee28f89440fd2ce556405Affected
119f5173628aa7a0c3cf9db83460d40709e8241d to before 1e4350095e8ab2577ee05f8c3b044e661b5af9a0Affected

LinuxLinux

4.7Affected
before 4.7Not affected
4.19.316 through 4.19.*Not affected
5.4.278 through 5.4.*Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.8.12 through 6.8.*Not affected
6.9.3 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.