CVE-2024-26913: linux-libc-dev - Fix dcn35 8k30 Underflow/Corruption Issue
Summary
CVE-2024-26913: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue [why] odm calculation is missing for pipe split policy determination and cause Underflow/Corr... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
linux-libc-dev is a package in the Debian operating system that provides the C library development files for the Linux kernel. It is an essential component for building and compiling applications on Debian-based systems. The vulnerability identified as CVE-2024-26913 affects the linux-libc-dev package, specifically in the drm/amd/display module of the kernel. This vulnerability can lead to underflow/corruption issues in the dcn35 8k30 display. The dcn35 8k30 display is a display controller used in certain AMD graphics cards.
Vulnerability Detail
The vulnerability arises from the missing odm calculation for pipe split policy determination in the drm/amd/display module. This missing calculation causes underflow/corruption issues in the dcn35 8k30 display. The underflow/corruption can result in visual artifacts, display flickering, or even system crashes. An attacker with local access to the affected system could potentially exploit this vulnerability to cause a denial of service or execute arbitrary code with elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the linux-libc-dev package, specifically in the drm/amd/display module, can lead to underflow/corruption issues in the dcn35 8k30 display. It is crucial to update the linux-libc-dev package to version 6.1.90-1 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Debian operating system that provides the C library development files for the Linux kernel. It is used for building and compiling applications on Debian-based systems.
The dcn35 8k30 display is a display controller used in certain AMD graphics cards. It is affected by the underflow/corruption issue caused by the vulnerability.
The vulnerability can lead to underflow/corruption issues in the dcn35 8k30 display, resulting in visual artifacts, display flickering, or system crashes. An attacker with local access could exploit this vulnerability to cause a denial of service or execute arbitrary code with elevated privileges.
To fix this vulnerability, update the linux-libc-dev package to version 6.1.90-1 or later. This update includes the necessary fix for the dcn35 8k30 underflow/corruption issue.
The update for linux-libc-dev can be obtained from the official Debian repositories or through the package manager of the respective Debian-based system.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
