Vulnerabilities > CVE-2024-27042 - Improper Validation of Array Index vulnerability in Linux Kernel
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' The issue arises when the array 'adev->vcn.vcn_config' is accessed before checking if the index 'adev->vcn.num_vcn_inst' is within the bounds of the array. The fix involves moving the bounds check before the array access. This ensures that 'adev->vcn.num_vcn_inst' is within the bounds of the array before it is used as an index. Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c:1289 amdgpu_discovery_reg_base_init() error: testing array offset 'adev->vcn.num_vcn_inst' after use.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Overflow Buffers Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
References
- https://git.kernel.org/stable/c/8db10cee51e3e11a6658742465edc21986cf1e8d
- https://git.kernel.org/stable/c/8db10cee51e3e11a6658742465edc21986cf1e8d
- https://git.kernel.org/stable/c/8f3e68c6a3fff53c2240762a47a0045d89371775
- https://git.kernel.org/stable/c/8f3e68c6a3fff53c2240762a47a0045d89371775
- https://git.kernel.org/stable/c/b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058
- https://git.kernel.org/stable/c/b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058
- https://git.kernel.org/stable/c/cdb637d339572398821204a1142d8d615668f1e9
- https://git.kernel.org/stable/c/cdb637d339572398821204a1142d8d615668f1e9