CVE-2024-42228

Source
https://cve.org/CVERecord?id=CVE-2024-42228
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42228.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-42228
Downstream
Related
Published
2024-07-30T07:47:08.955Z
Modified
2026-05-07T04:18:37.449366Z
Summary
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Using uninitialized value *size when calling amdgpuvcecs_reloc

Initialize the size before calling amdgpuvcecs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian)

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42228.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Fixed
d35cf41c8eb5d9fe95b21ae6ee2910f9ba4878e8
Fixed
3b505759447637dcccb50cbd98ec6f8d2a04fc46
Fixed
df02642c21c984303fe34c3f7d72965792fb1a15
Fixed
da6a85d197888067e8d38b5d22c986b5b5cab712
Fixed
9ee1534ecdd5b4c013064663502d7fde824d2144
Fixed
855ae72c20310e5402b2317fc537d911e87537ef
Fixed
f8f120b3de48b8b6bdf8988a9b334c2d61c17440
Fixed
88a9a467c548d0b3c7761b4fd54a68e70f9c0944

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42228.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.2.0
Fixed
4.19.321
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.283
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.225
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.166
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.108
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.39
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42228.json"