CVE-2024-42228: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
drm/amdgpu: Using uninitialized value size when calling amdgpuvcecsreloc
Other sources
Linux Kernel could allow a local authenticated attacker to execute arbitrary code on the system, caused by reusing uninitialized data when calling amdgpuvcecsreloc in drm/amdgpu. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system or or cause a denial of service condition..
— IBM
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42228?
CVE-2024-42228 has been rated as a high-severity vulnerability due to potential impacts on system stability and security.
How do I fix CVE-2024-42228?
To fix CVE-2024-42228, ensure your Linux kernel is updated to version 5.10.226-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-42228?
CVE-2024-42228 affects Linux kernel versions prior to 6.6.39.
Is CVE-2024-42228 part of any specific Debian packages?
Yes, CVE-2024-42228 is prevalent in specific Debian packages like linux and linux-6.1 versions prior to recommended updates.
What is the original cause of CVE-2024-42228?
CVE-2024-42228 is caused by using an uninitialized value *size in the amdgpu_vce_cs_reloc function.