In the Linux kernel, the following vulnerability has been resolved:
drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
In commit e11f5bd8228f ("drm: Add support for DP 1.4 Compliance edid corruption test") the function connector_bad_edid() started assuming that the memory for the EDID passed to it was big enough to hold `edid[0x7e] + 1` blocks of data (1 extra for the base block). It completely ignored the fact that the function was passed `num_blocks` which indicated how much memory had been allocated for the EDID.
Let's fix this by adding a bounds check.
This is important for handling the case where there's an error in the first block of the EDID. In that case we will call connector_bad_edid() without having re-allocated memory based on `edid[0x7e]`.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-preempt-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-preemptUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade kernel-debug-livepatch-devel | Aug 9, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub