In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return -EINVAL, the process should be stop to avoid out-of-bounds read, so directly return -EINVAL.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:7001 2024-09-24T00:00:00Z
kernel-0:4.18.0-553.22.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:7000 2024-09-24T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/011552f29f20842c9a7a21bffe1f6a2d6457ba46 cve-icon cve-icon
https://git.kernel.org/stable/c/0964c84b93db7fbf74f357c1e20957850e092db3 cve-icon cve-icon
https://git.kernel.org/stable/c/5594971e02764aa1c8210ffb838cb4e7897716e8 cve-icon cve-icon
https://git.kernel.org/stable/c/5b0a3dc3e87821acb80e841b464d335aff242691 cve-icon cve-icon
https://git.kernel.org/stable/c/8112fa72b7f139052843ff484130d6f97e9f052f cve-icon cve-icon
https://git.kernel.org/stable/c/8b2faf1a4f3b6c748c0da36cda865a226534d520 cve-icon cve-icon
https://git.kernel.org/stable/c/ea906e9ac61e3152bef63597f2d9f4a812fc346a cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062501-CVE-2024-39471-3dee@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-39471 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-39471 cve-icon
History

Wed, 13 Nov 2024 02:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Tue, 24 Sep 2024 11:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8

Tue, 24 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 03 Sep 2024 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-25T14:28:56.906Z

Updated: 2024-11-05T09:31:57.560Z

Reserved: 2024-06-25T14:23:23.745Z

Link: CVE-2024-39471

cve-icon Vulnrichment

Updated: 2024-08-02T04:26:15.268Z

cve-icon NVD

Status : Modified

Published: 2024-06-25T15:15:15.490

Modified: 2024-11-21T09:27:44.163

Link: CVE-2024-39471

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-06-25T00:00:00Z

Links: CVE-2024-39471 - Bugzilla