CVE-2024-38549
- Source
- https://cve.org/CVERecord?id=CVE-2024-38549
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-38549.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-38549
- Downstream
- Related
- Published
- 2024-06-19T13:35:22.042Z
- Modified
- 2026-05-13T03:52:19.958166259Z
- Summary
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Add 0 size check to mtkdrmgem_obj
Add a check to mtkdrmgem_init if we attempt to allocate a GEM object of 0 bytes. Currently, no such check exists and the kernel will panic if a userspace application attempts to allocate a 0x0 GBM buffer.
Tested by attempting to allocate a 0x0 GBM buffer on an MT8188 and verifying that we now return EINVAL.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38549.json" }- References
-
- https://git.kernel.org/stable/c/0e3b6f9123726858cac299e1654e3d20424cabe4
- https://git.kernel.org/stable/c/13562c2d48c9ee330de1077d00146742be368f05
- https://git.kernel.org/stable/c/1e4350095e8ab2577ee05f8c3b044e661b5af9a0
- https://git.kernel.org/stable/c/79078880795478d551a05acc41f957700030d364
- https://git.kernel.org/stable/c/9489951e3ae505534c4013db4e76b1b5a3151ac7
- https://git.kernel.org/stable/c/af26ea99019caee1500bf7e60c861136c0bf8594
- https://git.kernel.org/stable/c/be34a1b351ea7faeb15dde8c44fe89de3980ae67
- https://git.kernel.org/stable/c/d17b75ee9c2e44d3a3682c4ea5ab713ea6073350
- https://git.kernel.org/stable/c/fb4aabdb1b48c25d9e1ee28f89440fd2ce556405
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38549.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-38549
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced119f5173628aa7a0c3cf9db83460d40709e8241dFixed79078880795478d551a05acc41f957700030d364Fixedbe34a1b351ea7faeb15dde8c44fe89de3980ae67Fixedd17b75ee9c2e44d3a3682c4ea5ab713ea6073350Fixed0e3b6f9123726858cac299e1654e3d20424cabe4Fixed13562c2d48c9ee330de1077d00146742be368f05Fixedaf26ea99019caee1500bf7e60c861136c0bf8594Fixed9489951e3ae505534c4013db4e76b1b5a3151ac7Fixedfb4aabdb1b48c25d9e1ee28f89440fd2ce556405Fixed1e4350095e8ab2577ee05f8c3b044e661b5af9a0
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.7.0Fixed4.19.316
- Type
- ECOSYSTEM
- Events
-
Introduced4.20.0Fixed5.4.278
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.219
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.161
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.93
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.33
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.8.12
- Type
- ECOSYSTEM
- Events
-
Introduced6.9.0Fixed6.9.3