Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-26817

amdkfd: use calloc instead of kzalloc to avoid integer overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc instead of kzalloc to avoid integer overflow This uses calloc instead of doing the multiplication which might overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < e6721ea845fcb93a764a92bd40f1afc0d6c69751affected
  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < 8b0564704255c6b3c6a7188e86939f754e1577c0affected
  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < fcbd99b3c73309107e3be71f20dff9414df64f91affected
  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < cbac7de1d9901521e78cdc34e15451df3611f2adaffected
  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < e6768c6737f4c02cba193a3339f0cc2907f0b86aaffected
  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < 315eb3c2df7e4cb18e3eacfa18a53a46f2bf0ef7affected
  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < 0c33d11153949310d76631d8f4a4736519eacd3aaffected
  • 4a488a7ad71401169cecee75dc94bcce642e2c53 to < 3b0daecfeac0103aba8b293df07a0cbaf8b43f29affected

Linux Linux

Default version status: affected

  • 3.19affected
  • 0 to < 3.19unaffected
  • 4.19.312 to ≤ 4.19.*unaffected
  • 5.4.274 to ≤ 5.4.*unaffected
  • 5.10.215 to ≤ 5.10.*unaffected
  • 5.15.155 to ≤ 5.15.*unaffected
  • 6.1.86 to ≤ 6.1.*unaffected
  • 6.6.27 to ≤ 6.6.*unaffected
  • 6.8.6 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References