Bug 2297572 (CVE-2024-40988)

Summary:	CVE-2024-40988 kernel: drm/radeon: fix UBSAN warning in kv_dpm.c
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	dfreiber, drow, jburrell, jexposit, mcascell, ndegraef, rkeshri, vkumar
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	kernel 4.19.317, kernel 5.4.279, kernel 5.10.221, kernel 5.15.162, kernel 6.1.96, kernel 6.6.36, kernel 6.9.7, kernel 6.10-rc5	Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability was found in the Linux kernel's DRM/Radeon driver, specifically in the sumo_vid_mapping_entry within the kv_dpm.c file. Insufficient bounds checking can lead to memory corruption.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2024-07-12 13:47:08 UTC

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: fix UBSAN warning in kv_dpm.c

Adds bounds check for sumo_vid_mapping_entry.

Comment 12 Mauro Matteo Cascella 2024-08-16 18:45:08 UTC

Hi Niels,

Makes sense to me, Rohit (CC'd) can help assign a new CVE and notify upstream. Thank you for the heads up!

Comment 14 Rohit Keshri 2024-08-26 13:37:29 UTC

(In reply to Mauro Matteo Cascella from comment #12)
> Hi Niels,
> 
> Makes sense to me, Rohit (CC'd) can help assign a new CVE and notify
> upstream. Thank you for the heads up!

Requested.

Comment 15 errata-xmlrpc 2024-09-24 00:39:16 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:7001 https://access.redhat.com/errata/RHSA-2024:7001

Comment 16 errata-xmlrpc 2024-09-24 02:34:34 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:7000 https://access.redhat.com/errata/RHSA-2024:7000

Comment 17 errata-xmlrpc 2024-11-12 09:36:20 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:9315 https://access.redhat.com/errata/RHSA-2024:9315

Comment 18 errata-xmlrpc 2024-11-13 15:48:45 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2024:9546 https://access.redhat.com/errata/RHSA-2024:9546

Comment 20 errata-xmlrpc 2024-11-26 00:48:22 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:10262 https://access.redhat.com/errata/RHSA-2024:10262

Comment 22 errata-xmlrpc 2024-12-04 00:16:24 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:10773 https://access.redhat.com/errata/RHSA-2024:10773

Comment 23 errata-xmlrpc 2024-12-04 00:42:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:10772 https://access.redhat.com/errata/RHSA-2024:10772