In the Linux kernel, the following vulnerability has been resolved:
drm: nv04: Fix out of bounds access
When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or) is used as index there. The 'or' argument of fabricate_dcb_output() must be interpreted as a number of bit to set, not value.
Utilize macros from 'enum nouveau_or' in calls instead of hardcoding.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jul 17, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | May 1, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-mediatek | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-intelUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1008-oracle-64k | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub