In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure
that's actually used.
The length of the drm_event was set to the parent structure instead of
to the drm_vmw_event_fence which is supposed to be read. drm_read
uses the length parameter to copy the event to the user space thus
resuling in oob reads.
CVSS
No CVSS.
References
Configurations
No configuration.
History
03 Jul 2024, 02:03
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-125 |
27 Jun 2024, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
27 Jun 2024, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
03 Jun 2024, 14:46
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
03 Jun 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-03 08:15
Updated : 2024-07-03 02:03
NVD link : CVE-2024-36960
Mitre link : CVE-2024-36960
CVE.ORG link : CVE-2024-36960
JSON object : View
Products Affected
No product.
CWE
CWE-125
Out-of-bounds Read