In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Using uninitialized value *size when calling amdgpuvcecs_reloc
Initialize the size before calling amdgpuvcecs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian)
[
{
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@855ae72c20310e5402b2317fc537d911e87537ef",
"deprecated": false,
"id": "CVE-2024-42228-077675c5",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"115566096775203315399265836971263165966",
"75361321958167446893502653564928436132",
"210515575732473892295103369871024880613",
"17119714283900787041005167061562685627"
]
}
},
{
"target": {
"function": "amdgpu_vce_ring_parse_cs",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88a9a467c548d0b3c7761b4fd54a68e70f9c0944",
"deprecated": false,
"id": "CVE-2024-42228-2d401638",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "1235430185046228334096719521983762328",
"length": 3982.0
}
},
{
"target": {
"function": "amdgpu_vce_ring_parse_cs",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f8f120b3de48b8b6bdf8988a9b334c2d61c17440",
"deprecated": false,
"id": "CVE-2024-42228-3b38fec6",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "1235430185046228334096719521983762328",
"length": 3982.0
}
},
{
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f8f120b3de48b8b6bdf8988a9b334c2d61c17440",
"deprecated": false,
"id": "CVE-2024-42228-45e55792",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"115566096775203315399265836971263165966",
"75361321958167446893502653564928436132",
"210515575732473892295103369871024880613",
"17119714283900787041005167061562685627"
]
}
},
{
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da6a85d197888067e8d38b5d22c986b5b5cab712",
"deprecated": false,
"id": "CVE-2024-42228-92f8bfc7",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"115566096775203315399265836971263165966",
"309763883249294167633711094258392724148",
"32635625362342860793002781324447133570",
"292103373424179661676437449509383822804"
]
}
},
{
"target": {
"function": "amdgpu_vce_ring_parse_cs",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da6a85d197888067e8d38b5d22c986b5b5cab712",
"deprecated": false,
"id": "CVE-2024-42228-a40ff4cf",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "186504733253468287112092918689612846088",
"length": 4115.0
}
},
{
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df02642c21c984303fe34c3f7d72965792fb1a15",
"deprecated": false,
"id": "CVE-2024-42228-b05d847a",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"115566096775203315399265836971263165966",
"309763883249294167633711094258392724148",
"32635625362342860793002781324447133570",
"292103373424179661676437449509383822804"
]
}
},
{
"target": {
"function": "amdgpu_vce_ring_parse_cs",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b505759447637dcccb50cbd98ec6f8d2a04fc46",
"deprecated": false,
"id": "CVE-2024-42228-b86b3f6b",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "186504733253468287112092918689612846088",
"length": 4115.0
}
},
{
"target": {
"function": "amdgpu_vce_ring_parse_cs",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@855ae72c20310e5402b2317fc537d911e87537ef",
"deprecated": false,
"id": "CVE-2024-42228-c164a58f",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "1235430185046228334096719521983762328",
"length": 3982.0
}
},
{
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88a9a467c548d0b3c7761b4fd54a68e70f9c0944",
"deprecated": false,
"id": "CVE-2024-42228-dd44b3e1",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"115566096775203315399265836971263165966",
"75361321958167446893502653564928436132",
"210515575732473892295103369871024880613",
"17119714283900787041005167061562685627"
]
}
},
{
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b505759447637dcccb50cbd98ec6f8d2a04fc46",
"deprecated": false,
"id": "CVE-2024-42228-e493e98b",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"115566096775203315399265836971263165966",
"309763883249294167633711094258392724148",
"32635625362342860793002781324447133570",
"292103373424179661676437449509383822804"
]
}
},
{
"target": {
"function": "amdgpu_vce_ring_parse_cs",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df02642c21c984303fe34c3f7d72965792fb1a15",
"deprecated": false,
"id": "CVE-2024-42228-fb031f30",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "186504733253468287112092918689612846088",
"length": 4115.0
}
}
]