vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-42228

drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

HIGH
7
CVSS Score
Published: July 30, 2024 at 07:47 AM UTC
Updated: June 17, 2026 at 07:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
v < 6.6.394.2 ≤ v < 4.19.3214.2 ≤ v < 5.10.2254.2 ≤ v < 5.15.1664.2 ≤ v < 5.4.2834.2 ≤ v < 6.1.1084.2 ≤ v < 6.104.2 ≤ v < 6.6.394.2 ≤ v < 6.9.96.7 ≤ v < 6.9.94.2d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Vendor states this is fixed in 3b505759447637dcccb50cbd98ec6f8d2a04fc46 (fixed)
Vendor states this is fixed in 855ae72c20310e5402b2317fc537d911e87537ef (fixed)
Vendor states this is fixed in 88a9a467c548d0b3c7761b4fd54a68e70f9c0944 (fixed)
Vendor states this is fixed in 9ee1534ecdd5b4c013064663502d7fde824d2144 (fixed)
Vendor states this is fixed in d35cf41c8eb5d9fe95b21ae6ee2910f9ba4878e8 (fixed)
Vendor states this is fixed in da6a85d197888067e8d38b5d22c986b5b5cab712 (fixed)
Vendor states this is fixed in df02642c21c984303fe34c3f7d72965792fb1a15 (fixed)
Vendor states this is fixed in f8f120b3de48b8b6bdf8988a9b334c2d61c17440 (fixed)
Vendor states this is fixed in 4.19.321 (unaffected)
Vendor states this is fixed in 4.2 (unaffected)
Vendor states this is fixed in 5.10.225 (unaffected)
Vendor states this is fixed in 5.15.166 (unaffected)
Vendor states this is fixed in 5.4.283 (unaffected)
Vendor states this is fixed in 6.1.108 (unaffected)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.6.39 (unaffected)
Vendor states this is fixed in 6.9.9 (unaffected)

References (10)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3b505759447637dcccb50cbd98ec6f8d2a04fc46
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/855ae72c20310e5402b2317fc537d911e87537ef
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/88a9a467c548d0b3c7761b4fd54a68e70f9c0944
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9ee1534ecdd5b4c013064663502d7fde824d2144
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d35cf41c8eb5d9fe95b21ae6ee2910f9ba4878e8
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/da6a85d197888067e8d38b5d22c986b5b5cab712
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/df02642c21c984303fe34c3f7d72965792fb1a15
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f8f120b3de48b8b6bdf8988a9b334c2d61c17440

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7HIGH[email protected]
Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-908

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card