In the Linux kernel, the following vulnerability has been resolved:
drm: nv04: Fix out of bounds access
When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or) is used as index there. The 'or' argument of fabricate_dcb_output() must be interpreted as a number of bit to set, not value.
Utilize macros from 'enum nouveau_or' in calls instead of hardcoding.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jul 17, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | May 1, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rt | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-1088-bluefield | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub