CVE-2024-27042
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-27042
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-27042.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-27042
- Downstream
- Related
- Published
- 2024-05-01T12:54:07.719Z
- Modified
- 2025-11-15T19:25:58.928349Z
- Summary
- drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix potential out-of-bounds access in 'amdgpudiscoveryregbaseinit()'
The issue arises when the array 'adev->vcn.vcnconfig' is accessed before checking if the index 'adev->vcn.numvcn_inst' is within the bounds of the array.
The fix involves moving the bounds check before the array access. This ensures that 'adev->vcn.numvcninst' is within the bounds of the array before it is used as an index.
Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpudiscovery.c:1289 amdgpudiscoveryregbaseinit() error: testing array offset 'adev->vcn.numvcn_inst' after use.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/8db10cee51e3e11a6658742465edc21986cf1e8d
- https://git.kernel.org/stable/c/8f3e68c6a3fff53c2240762a47a0045d89371775
- https://git.kernel.org/stable/c/b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058
- https://git.kernel.org/stable/c/cdb637d339572398821204a1142d8d615668f1e9
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda0ccc717c4ab3ef572f023fdceffb4b6df496a0dFixed8f3e68c6a3fff53c2240762a47a0045d89371775
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda0ccc717c4ab3ef572f023fdceffb4b6df496a0dFixedb33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda0ccc717c4ab3ef572f023fdceffb4b6df496a0dFixed8db10cee51e3e11a6658742465edc21986cf1e8d
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda0ccc717c4ab3ef572f023fdceffb4b6df496a0dFixedcdb637d339572398821204a1142d8d615668f1e9
Affected versions
v5.*
v5.18
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
Database specific
vanir_signatures
[
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"325934718580591288597826448686130467692",
"284786933653546711023637314193963399087",
"189201165371388698135764915485907846048",
"143596053723739716790578732854107212385",
"160131513625955665558058711123419927239",
"200097109772373505885742461586637820",
"295932610915831657954429951536272647052",
"312587483094128070105842236988162525571",
"299508806778327091189582542134343259952",
"314120920920270877669497194989433186775",
"276041800460652937651216354377040764883",
"164241774896110428046406825861242471705"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdb637d339572398821204a1142d8d615668f1e9",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c"
},
"id": "CVE-2024-27042-07c545e0",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"325934718580591288597826448686130467692",
"284786933653546711023637314193963399087",
"189201165371388698135764915485907846048",
"143596053723739716790578732854107212385",
"160131513625955665558058711123419927239",
"200097109772373505885742461586637820",
"295932610915831657954429951536272647052",
"312587483094128070105842236988162525571",
"299508806778327091189582542134343259952",
"314120920920270877669497194989433186775",
"276041800460652937651216354377040764883",
"164241774896110428046406825861242471705"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c"
},
"id": "CVE-2024-27042-226ab00c",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "10820051316388430058542518892984072281",
"length": 3603.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f3e68c6a3fff53c2240762a47a0045d89371775",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c",
"function": "amdgpu_discovery_reg_base_init"
},
"id": "CVE-2024-27042-2f676df8",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"325934718580591288597826448686130467692",
"284786933653546711023637314193963399087",
"189201165371388698135764915485907846048",
"143596053723739716790578732854107212385",
"160131513625955665558058711123419927239",
"200097109772373505885742461586637820",
"295932610915831657954429951536272647052",
"312587483094128070105842236988162525571",
"299508806778327091189582542134343259952",
"314120920920270877669497194989433186775",
"276041800460652937651216354377040764883",
"164241774896110428046406825861242471705"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f3e68c6a3fff53c2240762a47a0045d89371775",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c"
},
"id": "CVE-2024-27042-73cc08af",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "27690968175424770862108225814831430446",
"length": 3733.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdb637d339572398821204a1142d8d615668f1e9",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c",
"function": "amdgpu_discovery_reg_base_init"
},
"id": "CVE-2024-27042-8ca7ba28",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "27690968175424770862108225814831430446",
"length": 3733.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8db10cee51e3e11a6658742465edc21986cf1e8d",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c",
"function": "amdgpu_discovery_reg_base_init"
},
"id": "CVE-2024-27042-b93f9aa2",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"325934718580591288597826448686130467692",
"284786933653546711023637314193963399087",
"189201165371388698135764915485907846048",
"143596053723739716790578732854107212385",
"160131513625955665558058711123419927239",
"200097109772373505885742461586637820",
"295932610915831657954429951536272647052",
"312587483094128070105842236988162525571",
"299508806778327091189582542134343259952",
"314120920920270877669497194989433186775",
"276041800460652937651216354377040764883",
"164241774896110428046406825861242471705"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8db10cee51e3e11a6658742465edc21986cf1e8d",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c"
},
"id": "CVE-2024-27042-c21a4dcd",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "27690968175424770862108225814831430446",
"length": 3733.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c",
"function": "amdgpu_discovery_reg_base_init"
},
"id": "CVE-2024-27042-e574d5c2",
"deprecated": false,
"signature_version": "v1"
}
]