Junglewise Threat Intelligence

CVE-2024-49894: Linux Kernel AMD Display Driver out-of-bounds access in degamma translation

CVE-2024-49894 · Severity: high · CVSS 7.8 · Published 2024-10-21

Vendors: Linux Foundation.

Executive brief

A vulnerability exists in the Linux kernel's AMD display driver, which manages how graphics are rendered on systems with AMD hardware. An attacker with local access to the system could exploit this flaw to cause a system crash or potentially gain unauthorized access to sensitive information. This issue affects the stability and security of workstations and servers using affected AMD graphics components.

Technical details

An out-of-bounds read/write vulnerability exists in the 'cm_helper_translate_curve_to_degamma_hw_format' function within the AMD display driver (amdgpu) of the Linux kernel. The root cause is a lack of bounds checking on the index 'i' when accessing transfer function points (TRANSFER_FUNC_POINTS) for red, green, and blue color channels. A local attacker can trigger this by providing a specially crafted transfer function, leading to a buffer overflow. This can result in a kernel panic (DoS) or arbitrary code execution in kernel space. The issue has been patched in various stable branches by adding explicit bounds validation for the index before array access.

Affected products

  • Linux Foundation Linux kernel up to (excluding) 5.10.227, 5.11 to (excluding) 5.15.168, 5.16 to (excluding) 6.1.113, 6.2 to (excluding) 6.6.55, 6.7 to (excluding) 6.10.14, 6.11 to (excluding) 6.11.3

Timeline

  • 2024-10-21: disclosed: Initial disclosure by kernel.org
  • 2024-10-21: advisory: NVD publication date
  • 2024-10-10: patched: Patches committed to stable branches 6.1, 6.6, 6.10, etc.

References