In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' Tell snprintf() to store at most 10 bytes in the output buffer instead of 30. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/440f059837418fac1695b65d3ebc6080d33be877 cve-icon cve-icon
https://git.kernel.org/stable/c/4b09715f1504f1b6e8dff0e9643630610bc05141 cve-icon cve-icon
https://git.kernel.org/stable/c/ad76fd30557d6a106c481e4606a981221ca525f7 cve-icon cve-icon
https://git.kernel.org/stable/c/cf114d8d4a8d78df272116a745bb43b48cef65f4 cve-icon cve-icon
https://git.kernel.org/stable/c/d346b3e5b25c95d504478507eb867cd3818775ab cve-icon cve-icon
https://git.kernel.org/stable/c/eb9327af3621d26b1d83f767c97a3fe8191a3a65 cve-icon cve-icon
https://git.kernel.org/stable/c/ff28893c96c5e0927a4da10cd24a3522ca663515 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024050113-CVE-2024-27045-6680@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-27045 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-27045 cve-icon
History

Mon, 23 Dec 2024 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-120
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Wed, 06 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-01T12:54:18.138Z

Updated: 2024-12-19T08:53:16.563Z

Reserved: 2024-02-19T14:20:24.213Z

Link: CVE-2024-27045

cve-icon Vulnrichment

Updated: 2024-08-02T00:21:05.892Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-01T13:15:49.837

Modified: 2024-12-23T19:13:59.617

Link: CVE-2024-27045

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-01T00:00:00Z

Links: CVE-2024-27045 - Bugzilla