CVE-2024-49892

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize get_bytes_per_element's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytes_per_element_y & bytes_per_element_c are initialized by get_bytes_per_element() which should never return 0. This fixes 10 DIVIDE_BY_ZERO issues reported by Coverity.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76	Patch
https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda	Patch
https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610	Patch
https://git.kernel.org/stable/c/8f0abb39c16e719129de10596b3ae3363fa178b4
https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583	Patch
https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724	Patch
https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7	Patch
https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

08 Nov 2024, 16:15

Type	Values Removed	Values Added
References		() https://git.kernel.org/stable/c/8f0abb39c16e719129de10596b3ae3363fa178b4 -

25 Oct 2024, 14:32

Type	Values Removed	Values Added
References	~~() https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76 -~~	() https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76 - Patch
References	~~() https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda -~~	() https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda - Patch
References	~~() https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610 -~~	() https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610 - Patch
References	~~() https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583 -~~	() https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583 - Patch
References	~~() https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724 -~~	() https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724 - Patch
References	~~() https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7 -~~	() https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7 - Patch
References	~~() https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c -~~	() https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c - Patch
First Time		Linux linux Kernel Linux
CPE		cpe:2.3:o:linux:linux_kernel::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
CWE		CWE-369

23 Oct 2024, 15:13

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: inicializar el valor predeterminado de get_bytes_per_element en 1. Las variables, utilizadas como denominadores y que quizás no se asignen a otros valores, no deben ser 0. bytes_per_element_y y bytes_per_element_c se inicializan mediante get_bytes_per_element(), que nunca debe devolver 0. Esto corrige 10 problemas de DIVIDE_BY_ZERO informados por Coverity.

21 Oct 2024, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-10-21 18:15

Updated : 2024-11-08 16:15

NVD link : CVE-2024-49892

Mitre link : CVE-2024-49892

CVE.ORG link : CVE-2024-49892

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-369

Divide By Zero

5.5 /10