NVD Vulnerability Detail

CVE-2024-50016

Summary	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow assignment in link_dp_cts sampling_rate is an uint8_t but is assigned an unsigned int, and thus it can overflow. As a result, sampling_rate is changed to uint32_t. Similarly, LINK_QUAL_PATTERN_SET has a size of 2 bits, and it should only be assigned to a value less or equal than 4. This fixes 2 INTEGER_OVERFLOW issues reported by Coverity.
Publication Date	Oct. 22, 2024, 4:15 a.m.
Registration Date	Oct. 22, 2024, 12:02 p.m.
Last Update	Oct. 29, 2024, 2:17 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/a1495acc6234fa79b775599d3f49009afd53299f	Patch
2	https://git.kernel.org/stable/c/26ced9d86240868f5b41708ceee02e6ec2924498	Patch
3	https://git.kernel.org/stable/c/adeed800bc30ef718478b28c08f79231e5980e3d	Patch
4	https://git.kernel.org/stable/c/a15268787b79fd183dd526cc16bec9af4f4e49a1	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-190	整数オーバーフローまたはラップアラウンド	https://cwe.mitre.org/data/definitions/190.html

JVN Vulnerability Information

Linux の Linux Kernel における整数オーバーフローの脆弱性

Title	Linux の Linux Kernel における整数オーバーフローの脆弱性
Summary	Linux の Linux Kernel には、整数オーバーフローの脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	July 27, 2024, midnight
Registration Date	Oct. 29, 2024, 2:08 p.m.
Last Update	Oct. 29, 2024, 2:08 p.m.

Affected System

Linux

Linux Kernel 6.11 以上 6.11.3 未満

Linux Kernel 6.6.55 未満

Linux Kernel 6.7 以上 6.10.14 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50016	https://www.cve.org/CVERecord?id=CVE-2024-50016
National Vulnerability Database (NVD)
2	CVE-2024-50016	https://nvd.nist.gov/vuln/detail/CVE-2024-50016

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-190	https://cwe.mitre.org/data/definitions/190.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	drm/amd/display: Avoid overflow assignment in link_dp_cts (26ced9d)	https://git.kernel.org/stable/c/26ced9d86240868f5b41708ceee02e6ec2924498
2	drm/amd/display: Avoid overflow assignment in link_dp_cts (a1495ac)	https://git.kernel.org/stable/c/a1495acc6234fa79b775599d3f49009afd53299f
3	drm/amd/display: Avoid overflow assignment in link_dp_cts (a152687)	https://git.kernel.org/stable/c/a15268787b79fd183dd526cc16bec9af4f4e49a1
4	drm/amd/display: Avoid overflow assignment in link_dp_cts (adeed80)	https://git.kernel.org/stable/c/adeed800bc30ef718478b28c08f79231e5980e3d
Linux Kernel
5	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月29日] 掲載	Oct. 29, 2024, 12:41 p.m.