Description
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtk_drm_gem_obj Add a check to mtk_drm_gem_init if we attempt to allocate a GEM object of 0 bytes. Currently, no such check exists and the kernel will panic if a userspace application attempts to allocate a 0x0 GBM buffer. Tested by attempting to allocate a 0x0 GBM buffer on an MT8188 and verifying that we now return EINVAL.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
119f5173628aa7a0c3cf9db83460d40709e8241d to < 79078880795478d551a05acc41f957700030d364affected119f5173628aa7a0c3cf9db83460d40709e8241d to < be34a1b351ea7faeb15dde8c44fe89de3980ae67affected119f5173628aa7a0c3cf9db83460d40709e8241d to < d17b75ee9c2e44d3a3682c4ea5ab713ea6073350affected119f5173628aa7a0c3cf9db83460d40709e8241d to < 0e3b6f9123726858cac299e1654e3d20424cabe4affected119f5173628aa7a0c3cf9db83460d40709e8241d to < 13562c2d48c9ee330de1077d00146742be368f05affected119f5173628aa7a0c3cf9db83460d40709e8241d to < af26ea99019caee1500bf7e60c861136c0bf8594affected119f5173628aa7a0c3cf9db83460d40709e8241d to < 9489951e3ae505534c4013db4e76b1b5a3151ac7affected119f5173628aa7a0c3cf9db83460d40709e8241d to < fb4aabdb1b48c25d9e1ee28f89440fd2ce556405affected119f5173628aa7a0c3cf9db83460d40709e8241d to < 1e4350095e8ab2577ee05f8c3b044e661b5af9a0affected
Linux Linux
Default version status: affected
4.7affected0 to < 4.7unaffected4.19.316 to ≤ 4.19.*unaffected5.4.278 to ≤ 5.4.*unaffected5.10.219 to ≤ 5.10.*unaffected5.15.161 to ≤ 5.15.*unaffected6.1.93 to ≤ 6.1.*unaffected6.6.33 to ≤ 6.6.*unaffected6.8.12 to ≤ 6.8.*unaffected6.9.3 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/79078880795478d551a05acc41f957700030d364 ↗
- https://git.kernel.org/stable/c/be34a1b351ea7faeb15dde8c44fe89de3980ae67 ↗
- https://git.kernel.org/stable/c/d17b75ee9c2e44d3a3682c4ea5ab713ea6073350 ↗
- https://git.kernel.org/stable/c/0e3b6f9123726858cac299e1654e3d20424cabe4 ↗
- https://git.kernel.org/stable/c/13562c2d48c9ee330de1077d00146742be368f05 ↗
- https://git.kernel.org/stable/c/af26ea99019caee1500bf7e60c861136c0bf8594 ↗
- https://git.kernel.org/stable/c/9489951e3ae505534c4013db4e76b1b5a3151ac7 ↗
- https://git.kernel.org/stable/c/fb4aabdb1b48c25d9e1ee28f89440fd2ce556405 ↗
- https://git.kernel.org/stable/c/1e4350095e8ab2577ee05f8c3b044e661b5af9a0 ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗