Critical Size Calculation Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2024-46729: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop [WHY] fe_clk_en has size of 5 but sizeof(fe_clk_en) has byte size 20 which is lager than the ar... Affects linux versions < 6.10.9-1. Fixed in 6.10.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various platforms, including servers, desktops, and embedded systems. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically within the DRM AMD display subsystem, which is responsible for rendering graphics on AMD hardware.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the DRM AMD display subsystem, where an incorrect size calculation for the 'fe_clk_en' array can lead to buffer overrun issues. The size of 'fe_clk_en' is defined as 5, but the calculated byte size is 20, which exceeds the allocated array size. This discrepancy can result in memory corruption, potentially allowing an attacker to exploit the system, leading to unauthorized access or system instability.
How To Fix
Minimum fixed version
6.10.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
The identified vulnerability in the Linux kernel's DRM AMD display subsystem poses significant risks due to incorrect size calculations, leading to potential buffer overruns. Users are strongly advised to update their systems to the patched version to mitigate these risks effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a size calculation error in the Linux kernel's DRM AMD display subsystem, leading to potential buffer overruns.
The vulnerability affects the Linux kernel versions in Debian 13 and 14 prior to the fixed version 6.10.9-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Exploitation of this vulnerability could lead to memory corruption, unauthorized access, or system instability.
Currently, there are no specific workarounds available. The recommended action is to update to the patched version as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
