In the Linux kernel, the following vulnerability has been resolved:
drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
In commit e11f5bd8228f ("drm: Add support for DP 1.4 Compliance edid corruption test") the function connector_bad_edid() started assuming that the memory for the EDID passed to it was big enough to hold `edid[0x7e] + 1` blocks of data (1 extra for the base block). It completely ignored the fact that the function was passed `num_blocks` which indicated how much memory had been allocated for the EDID.
Let's fix this by adding a bounds check.
This is important for handling the case where there's an error in the first block of the EDID. In that case we will call connector_bad_edid() without having re-allocated memory based on `edid[0x7e]`.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-broadcom | Aug 9, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub