In the Linux kernel, the following vulnerability has been resolved:
drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
In commit e11f5bd8228f ("drm: Add support for DP 1.4 Compliance edid corruption test") the function connector_bad_edid() started assuming that the memory for the EDID passed to it was big enough to hold `edid[0x7e] + 1` blocks of data (1 extra for the base block). It completely ignored the fact that the function was passed `num_blocks` which indicated how much memory had been allocated for the EDID.
Let's fix this by adding a bounds check.
This is important for handling the case where there's an error in the first block of the EDID. In that case we will call connector_bad_edid() without having re-allocated memory based on `edid[0x7e]`.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64 | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-preemptUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-syms-azure | Aug 9, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub