In the Linux kernel, the following vulnerability has been resolved:
drm: nv04: Fix out of bounds access
When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or) is used as index there. The 'or' argument of fabricate_dcb_output() must be interpreted as a number of bit to set, not value.
Utilize macros from 'enum nouveau_or' in calls instead of hardcoding.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | May 1, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-64kb-devel | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-genericUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-oem | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub