CVE-2024-49892
AMD Linux Kernel Divide By Zero Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize get_bytes_per_element's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytes_per_element_y & bytes_per_element_c are initialized by get_bytes_per_element() which should never return 0. This fixes 10 DIVIDE_BY_ZERO issues reported by Coverity.
INFO
Published Date :
Oct. 21, 2024, 6:15 p.m.
Last Modified :
Nov. 8, 2024, 4:15 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-49892.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-49892 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-49892 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 08, 2024
Action Type Old Value New Value Added Reference kernel.org https://git.kernel.org/stable/c/8f0abb39c16e719129de10596b3ae3363fa178b4 [No types assigned] -
Initial Analysis by [email protected]
Oct. 25, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76 No Types Assigned https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76 Patch Changed Reference Type https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda No Types Assigned https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda Patch Changed Reference Type https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610 No Types Assigned https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610 Patch Changed Reference Type https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583 No Types Assigned https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583 Patch Changed Reference Type https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724 No Types Assigned https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724 Patch Changed Reference Type https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7 No Types Assigned https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7 Patch Changed Reference Type https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c No Types Assigned https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c Patch Added CWE NIST CWE-369 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 5.10.227 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.168 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.113 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.55 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.10.14 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.11 up to (excluding) 6.11.3 -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Oct. 21, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize get_bytes_per_element's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytes_per_element_y & bytes_per_element_c are initialized by get_bytes_per_element() which should never return 0. This fixes 10 DIVIDE_BY_ZERO issues reported by Coverity. Added Reference kernel.org https://git.kernel.org/stable/c/f921335123f6620c3dce5c96fbb95f18524a021c [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a23d6029e730f8a151b1a34afb169baac1274583 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-49892 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-49892
weaknesses.