In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Add 0 size check to mtkdrmgem_obj
Add a check to mtkdrmgem_init if we attempt to allocate a GEM object of 0 bytes. Currently, no such check exists and the kernel will panic if a userspace application attempts to allocate a 0x0 GBM buffer.
Tested by attempting to allocate a 0x0 GBM buffer on an MT8188 and verifying that we now return EINVAL.
{ "vanir_signatures": [ { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 409.0, "function_hash": "255713548236274946236574484136393050061" }, "signature_version": "v1", "id": "CVE-2024-38549-05729479", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d17b75ee9c2e44d3a3682c4ea5ab713ea6073350", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-1e59378c", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be34a1b351ea7faeb15dde8c44fe89de3980ae67", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 460.0, "function_hash": "288700462856454054934055712258017185677" }, "signature_version": "v1", "id": "CVE-2024-38549-1e7ab81f", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e3b6f9123726858cac299e1654e3d20424cabe4", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-236bc0c0", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79078880795478d551a05acc41f957700030d364", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-325e9079", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb4aabdb1b48c25d9e1ee28f89440fd2ce556405", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-4e4efea4", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9489951e3ae505534c4013db4e76b1b5a3151ac7", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-60aef585", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e3b6f9123726858cac299e1654e3d20424cabe4", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 460.0, "function_hash": "288700462856454054934055712258017185677" }, "signature_version": "v1", "id": "CVE-2024-38549-963aafb6", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9489951e3ae505534c4013db4e76b1b5a3151ac7", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-97479a2b", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d17b75ee9c2e44d3a3682c4ea5ab713ea6073350", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 460.0, "function_hash": "288700462856454054934055712258017185677" }, "signature_version": "v1", "id": "CVE-2024-38549-a35f7bad", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13562c2d48c9ee330de1077d00146742be368f05", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 460.0, "function_hash": "288700462856454054934055712258017185677" }, "signature_version": "v1", "id": "CVE-2024-38549-a3739d61", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af26ea99019caee1500bf7e60c861136c0bf8594", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 460.0, "function_hash": "288700462856454054934055712258017185677" }, "signature_version": "v1", "id": "CVE-2024-38549-b9033f06", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb4aabdb1b48c25d9e1ee28f89440fd2ce556405", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 409.0, "function_hash": "255713548236274946236574484136393050061" }, "signature_version": "v1", "id": "CVE-2024-38549-ca7593c6", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79078880795478d551a05acc41f957700030d364", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 460.0, "function_hash": "288700462856454054934055712258017185677" }, "signature_version": "v1", "id": "CVE-2024-38549-d7f6f040", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e4350095e8ab2577ee05f8c3b044e661b5af9a0", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c", "function": "mtk_drm_gem_init" }, "digest": { "length": 409.0, "function_hash": "255713548236274946236574484136393050061" }, "signature_version": "v1", "id": "CVE-2024-38549-ed696d64", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be34a1b351ea7faeb15dde8c44fe89de3980ae67", "signature_type": "Function" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-ee0864bf", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af26ea99019caee1500bf7e60c861136c0bf8594", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-f842fc7b", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13562c2d48c9ee330de1077d00146742be368f05", "signature_type": "Line" }, { "target": { "file": "drivers/gpu/drm/mediatek/mtk_drm_gem.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "332350467558199596649159869647893516710", "282167653809195336110793790341076807793", "106527026736945609590972760473174196047" ] }, "signature_version": "v1", "id": "CVE-2024-38549-ff4a3e96", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e4350095e8ab2577ee05f8c3b044e661b5af9a0", "signature_type": "Line" } ] }