In the Linux kernel, the following vulnerability has been resolved:
drm: nv04: Fix out of bounds access
When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or) is used as index there. The 'or' argument of fabricate_dcb_output() must be interpreted as a number of bit to set, not value.
Utilize macros from 'enum nouveau_or' in calls instead of hardcoding.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | May 1, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade kernel-default-manUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-devel | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oracleUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-awsUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-oemUpgrade linux-image-azure-cvm | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub