Riskcovery

CVE-2024-42228

drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

State
Published
Severity
Not scored
Published
Jul 30, 2024
Updated
May 11, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before d35cf41c8eb5d9fe95b21ae6ee2910f9ba4878e8Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 3b505759447637dcccb50cbd98ec6f8d2a04fc46Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before df02642c21c984303fe34c3f7d72965792fb1a15Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before da6a85d197888067e8d38b5d22c986b5b5cab712Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 9ee1534ecdd5b4c013064663502d7fde824d2144Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 855ae72c20310e5402b2317fc537d911e87537efAffected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before f8f120b3de48b8b6bdf8988a9b334c2d61c17440Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 88a9a467c548d0b3c7761b4fd54a68e70f9c0944Affected
LinuxLinux
  • 4.2Affected
  • before 4.2Not affected
  • 4.19.321 through 4.19.*Not affected
  • 5.4.283 through 5.4.*Not affected
  • 5.10.225 through 5.10.*Not affected
  • 5.15.166 through 5.15.*Not affected
  • 6.1.108 through 6.1.*Not affected
  • 6.6.39 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.