NetSight
IP …
high7.1

CVE-2024-36960

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_…

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.4 before 4.19.314
from 4.20 before 5.4.276
from 5.5 before 5.10.217
from 5.11 before 5.15.159
from 5.16 before 6.1.91
from 6.2 before 6.6.31
DebianDebian Linux
Version 10.0

Weakness classification

CWE-125

References