Avoid Integer Overflow in amdkfd Using Calloc
CVE-2024-26817
Currently unrated
Summary
In the Linux kernel, the following vulnerability has been resolved:
amdkfd: use calloc instead of kzalloc to avoid integer overflow
This uses calloc instead of doing the multiplication which might overflow.
Affected Version(s)
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8b0564704255c6b3c6a7188e86939f754e1577c0
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
News Articles
prophaze.comCVE-2024-26817
CVE-2024-26817 : LINUX KERNEL UP TO 6.8.5 AMDKFD KZALLOC INTEGER OVERFLOW - Cloud WAF
CVE-2024-26817 : In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc instead of kzalloc to avoid integer overflow This uses calloc instead of doing the multiplication which might overflow.
9 months ago
References
Timeline
- π°
First article discovered by prophaze.com
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database1 News Article(s)