CVE-2024-42228

Updated: 2024-11-30 03:16:20.114841

Description:

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian)


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x HIGH 7

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.0 HIGH Released CLSA-2025:1743193221 2024-09-02 17:26:44
CentOS 6 ELS kernel 2.6.32 7.0 HIGH Not Vulnerable 2024-08-22 12:20:01
CentOS 7 ELS kernel 3.10.0 7.0 HIGH Released CLSA-2024:1724693366 2024-09-09 12:17:08
CentOS 8.4 ELS kernel 4.18.0 7.0 HIGH Released CLSA-2024:1725872696 2024-09-09 05:27:01
CentOS 8.5 ELS kernel 4.18.0 7.0 HIGH Released CLSA-2024:1725876080 2024-09-09 12:17:11
CentOS Stream 8 ELS kernel 4.18.0 7.0 HIGH Released CLSA-2024:1725871927 2024-09-09 05:27:01
CloudLinux 6 ELS kernel 2.6.32 7.0 HIGH Not Vulnerable 2024-08-22 12:20:01
CloudLinux 7 ELS kernel 3.10.0 7.0 HIGH Ignored 2025-01-10 22:43:49
Oracle Linux 6 ELS kernel 2.6.32 7.0 HIGH Not Vulnerable 2024-08-22 12:20:01
Oracle Linux 7 ELS kernel 3.10.0 7.0 HIGH Released CLSA-2025:1742322442 2025-03-25 03:29:40
Total: 14