Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 3.4, < 4.19.314 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/0dbfc73670b357456196130551e586345ca48e1bPatch
- https://git.kernel.org/stable/c/2f527e3efd37c7c5e85e8aa86308856b619fa59fPatch
- https://git.kernel.org/stable/c/3cd682357c6167f636aec8ac0efaa8ba61144d36Patch
- https://git.kernel.org/stable/c/7b5fd3af4a250dd0a2a558e07b43478748eb5d22Patch
- https://git.kernel.org/stable/c/a37ef7613c00f2d72c8fc08bd83fb6cc76926c8cPatch
- https://git.kernel.org/stable/c/b7bab33c4623c66e3398d5253870d4e88c52dfc0Patch
- https://git.kernel.org/stable/c/cef0962f2d3e5fd0660c8efb72321083a1b531a9Patch
- https://git.kernel.org/stable/c/deab66596dfad14f1c54eeefdb72428340d72a77Patch
- https://git.kernel.org/stable/c/0dbfc73670b357456196130551e586345ca48e1bPatch
- https://git.kernel.org/stable/c/2f527e3efd37c7c5e85e8aa86308856b619fa59fPatch
- https://git.kernel.org/stable/c/3cd682357c6167f636aec8ac0efaa8ba61144d36Patch
- https://git.kernel.org/stable/c/7b5fd3af4a250dd0a2a558e07b43478748eb5d22Patch
- https://git.kernel.org/stable/c/a37ef7613c00f2d72c8fc08bd83fb6cc76926c8cPatch
- https://git.kernel.org/stable/c/b7bab33c4623c66e3398d5253870d4e88c52dfc0Patch
- https://git.kernel.org/stable/c/cef0962f2d3e5fd0660c8efb72321083a1b531a9Patch
FAQ
What is CVE-2024-36960?
CVE-2024-36960 is a vulnerability with a CVSS score of 7.1 (HIGH). In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that...
How severe is CVE-2024-36960?
CVE-2024-36960 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-36960?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.