CVE-2024-27045 (GCVE-0-2024-27045)
Vulnerability from cvelistv5
Published
2024-05-01 12:54
Modified
2026-08-05 11:29
Severity ?
7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' Tell snprintf() to store at most 10 bytes in the output buffer instead of 30. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10
References
Impacted products
Vendor Product Version
Linux Linux Version: c06e09b76639657f284bfaf1cce29557a2515e85
Version: c06e09b76639657f284bfaf1cce29557a2515e85
Version: c06e09b76639657f284bfaf1cce29557a2515e85
Version: c06e09b76639657f284bfaf1cce29557a2515e85
Version: c06e09b76639657f284bfaf1cce29557a2515e85
Version: c06e09b76639657f284bfaf1cce29557a2515e85
Version: c06e09b76639657f284bfaf1cce29557a2515e85
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:21:05.892Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ff28893c96c5e0927a4da10cd24a3522ca663515"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/440f059837418fac1695b65d3ebc6080d33be877"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d346b3e5b25c95d504478507eb867cd3818775ab"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ad76fd30557d6a106c481e4606a981221ca525f7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/eb9327af3621d26b1d83f767c97a3fe8191a3a65"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cf114d8d4a8d78df272116a745bb43b48cef65f4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4b09715f1504f1b6e8dff0e9643630610bc05141"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-27045",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:44:14.603651Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:32.475Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ff28893c96c5e0927a4da10cd24a3522ca663515",
              "status": "affected",
              "version": "c06e09b76639657f284bfaf1cce29557a2515e85",
              "versionType": "git"
            },
            {
              "lessThan": "440f059837418fac1695b65d3ebc6080d33be877",
              "status": "affected",
              "version": "c06e09b76639657f284bfaf1cce29557a2515e85",
              "versionType": "git"
            },
            {
              "lessThan": "d346b3e5b25c95d504478507eb867cd3818775ab",
              "status": "affected",
              "version": "c06e09b76639657f284bfaf1cce29557a2515e85",
              "versionType": "git"
            },
            {
              "lessThan": "ad76fd30557d6a106c481e4606a981221ca525f7",
              "status": "affected",
              "version": "c06e09b76639657f284bfaf1cce29557a2515e85",
              "versionType": "git"
            },
            {
              "lessThan": "eb9327af3621d26b1d83f767c97a3fe8191a3a65",
              "status": "affected",
              "version": "c06e09b76639657f284bfaf1cce29557a2515e85",
              "versionType": "git"
            },
            {
              "lessThan": "cf114d8d4a8d78df272116a745bb43b48cef65f4",
              "status": "affected",
              "version": "c06e09b76639657f284bfaf1cce29557a2515e85",
              "versionType": "git"
            },
            {
              "lessThan": "4b09715f1504f1b6e8dff0e9643630610bc05141",
              "status": "affected",
              "version": "c06e09b76639657f284bfaf1cce29557a2515e85",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.9"
            },
            {
              "lessThan": "5.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.214",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.23",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.214",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.153",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.83",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.23",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.11",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.2",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix a potential buffer overflow in \u0027dp_dsc_clock_en_read()\u0027\n\nTell snprintf() to store at most 10 bytes in the output buffer\ninstead of 30.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is a debugfs `.read` handler reached only by opening and reading /sys/kernel/debug/dri/N/DP-X/dsc_clock_en through the local VFS. There is no network, adjacent-network, or physical path into `dp_dsc_clock_en_read()`.\nAC:H - The overflow can only occur if `dsc_state.dsc_clock_en` formats to 10 or more characters, but that value is extracted from the DSC_TOP_CONTROL.DSC_CLOCK_EN register whose mask is 0x00000001 on every ASIC generation, so it is always 0 or 1 \u2014 a bound the attacker cannot influence. Triggering the mis-sized `snprintf()` is trivial, but making it actually write out of bounds depends on hardware register state entirely outside attacker control.\nPR:L - The node is created with mode 0644 and requires no capability check in the read path, so any local account able to traverse debugfs can reach it \u2014 the norm on Android, ChromeOS, embedded graphics stacks and IGT/debug setups that grant a non-root graphics account access to /sys/kernel/debug/dri. This matches the PR:L already assigned to the analogous amdgpu debugfs read in CVE-2024-35795.\nUI:N - The attacker simply reads the file; no victim action, modeset, or privileged helper invocation is needed. The DisplayPort/eDP connector node exists automatically whenever the amdgpu display driver has bound to the GPU.\nS:U - The affected `rd_buf` allocation and any resulting slab corruption live entirely within the kernel\u0027s own security authority. No VM, hypervisor, IOMMU, or sandbox boundary is crossed.\nC:H - Under the potential-overflow framing, the mis-sized `snprintf()` bound permits a heap out-of-bounds write past a 10-byte kcalloc allocation, and per scoring guidance memory corruption of this kind is treated as leverageable for kernel information disclosure. The read-back loop itself is bounded by `rd_buf_size` and the buffer is zeroed by kcalloc, so there is no direct read primitive.\nI:H - An out-of-bounds heap write is scored as High integrity impact, since corruption of slab contents beyond the allocated 10 bytes is the classic primitive for control-flow hijacking. The written bytes are the ASCII rendering of a kernel-controlled value rather than attacker-chosen data, which limits practical exploitability.\nA:H - Writing past the end of the kmalloc\u0027d buffer corrupts allocator state adjacent to the object and trips redzone/KASAN out-of-bounds checks, either of which results in a kernel oops or panic. Any such heap corruption is scored as a full availability loss."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:29:12.070Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ff28893c96c5e0927a4da10cd24a3522ca663515"
        },
        {
          "url": "https://git.kernel.org/stable/c/440f059837418fac1695b65d3ebc6080d33be877"
        },
        {
          "url": "https://git.kernel.org/stable/c/d346b3e5b25c95d504478507eb867cd3818775ab"
        },
        {
          "url": "https://git.kernel.org/stable/c/ad76fd30557d6a106c481e4606a981221ca525f7"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb9327af3621d26b1d83f767c97a3fe8191a3a65"
        },
        {
          "url": "https://git.kernel.org/stable/c/cf114d8d4a8d78df272116a745bb43b48cef65f4"
        },
        {
          "url": "https://git.kernel.org/stable/c/4b09715f1504f1b6e8dff0e9643630610bc05141"
        }
      ],
      "title": "drm/amd/display: Fix a potential buffer overflow in \u0027dp_dsc_clock_en_read()\u0027",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-27045",
    "datePublished": "2024-05-01T12:54:18.138Z",
    "dateReserved": "2024-02-19T14:20:24.213Z",
    "dateUpdated": "2026-08-05T11:29:12.070Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/ff28893c96c5e0927a4da10cd24a3522ca663515\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/440f059837418fac1695b65d3ebc6080d33be877\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d346b3e5b25c95d504478507eb867cd3818775ab\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/ad76fd30557d6a106c481e4606a981221ca525f7\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/eb9327af3621d26b1d83f767c97a3fe8191a3a65\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/cf114d8d4a8d78df272116a745bb43b48cef65f4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/4b09715f1504f1b6e8dff0e9643630610bc05141\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:21:05.892Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27045\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:44:14.603651Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:17.218Z\"}}], \"cna\": {\"title\": \"drm/amd/display: Fix a potential buffer overflow in \u0027dp_dsc_clock_en_read()\u0027\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - The vulnerable code is a debugfs `.read` handler reached only by opening and reading /sys/kernel/debug/dri/N/DP-X/dsc_clock_en through the local VFS. There is no network, adjacent-network, or physical path into `dp_dsc_clock_en_read()`.\\nAC:H - The overflow can only occur if `dsc_state.dsc_clock_en` formats to 10 or more characters, but that value is extracted from the DSC_TOP_CONTROL.DSC_CLOCK_EN register whose mask is 0x00000001 on every ASIC generation, so it is always 0 or 1 \\u2014 a bound the attacker cannot influence. Triggering the mis-sized `snprintf()` is trivial, but making it actually write out of bounds depends on hardware register state entirely outside attacker control.\\nPR:L - The node is created with mode 0644 and requires no capability check in the read path, so any local account able to traverse debugfs can reach it \\u2014 the norm on Android, ChromeOS, embedded graphics stacks and IGT/debug setups that grant a non-root graphics account access to /sys/kernel/debug/dri. This matches the PR:L already assigned to the analogous amdgpu debugfs read in CVE-2024-35795.\\nUI:N - The attacker simply reads the file; no victim action, modeset, or privileged helper invocation is needed. The DisplayPort/eDP connector node exists automatically whenever the amdgpu display driver has bound to the GPU.\\nS:U - The affected `rd_buf` allocation and any resulting slab corruption live entirely within the kernel\u0027s own security authority. No VM, hypervisor, IOMMU, or sandbox boundary is crossed.\\nC:H - Under the potential-overflow framing, the mis-sized `snprintf()` bound permits a heap out-of-bounds write past a 10-byte kcalloc allocation, and per scoring guidance memory corruption of this kind is treated as leverageable for kernel information disclosure. The read-back loop itself is bounded by `rd_buf_size` and the buffer is zeroed by kcalloc, so there is no direct read primitive.\\nI:H - An out-of-bounds heap write is scored as High integrity impact, since corruption of slab contents beyond the allocated 10 bytes is the classic primitive for control-flow hijacking. The written bytes are the ASCII rendering of a kernel-controlled value rather than attacker-chosen data, which limits practical exploitability.\\nA:H - Writing past the end of the kmalloc\u0027d buffer corrupts allocator state adjacent to the object and trips redzone/KASAN out-of-bounds checks, either of which results in a kernel oops or panic. Any such heap corruption is scored as a full availability loss.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"c06e09b76639657f284bfaf1cce29557a2515e85\", \"lessThan\": \"ff28893c96c5e0927a4da10cd24a3522ca663515\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c06e09b76639657f284bfaf1cce29557a2515e85\", \"lessThan\": \"440f059837418fac1695b65d3ebc6080d33be877\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c06e09b76639657f284bfaf1cce29557a2515e85\", \"lessThan\": \"d346b3e5b25c95d504478507eb867cd3818775ab\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c06e09b76639657f284bfaf1cce29557a2515e85\", \"lessThan\": \"ad76fd30557d6a106c481e4606a981221ca525f7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c06e09b76639657f284bfaf1cce29557a2515e85\", \"lessThan\": \"eb9327af3621d26b1d83f767c97a3fe8191a3a65\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c06e09b76639657f284bfaf1cce29557a2515e85\", \"lessThan\": \"cf114d8d4a8d78df272116a745bb43b48cef65f4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c06e09b76639657f284bfaf1cce29557a2515e85\", \"lessThan\": \"4b09715f1504f1b6e8dff0e9643630610bc05141\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.9\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.9\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.214\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.153\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.83\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.23\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/ff28893c96c5e0927a4da10cd24a3522ca663515\"}, {\"url\": \"https://git.kernel.org/stable/c/440f059837418fac1695b65d3ebc6080d33be877\"}, {\"url\": \"https://git.kernel.org/stable/c/d346b3e5b25c95d504478507eb867cd3818775ab\"}, {\"url\": \"https://git.kernel.org/stable/c/ad76fd30557d6a106c481e4606a981221ca525f7\"}, {\"url\": \"https://git.kernel.org/stable/c/eb9327af3621d26b1d83f767c97a3fe8191a3a65\"}, {\"url\": \"https://git.kernel.org/stable/c/cf114d8d4a8d78df272116a745bb43b48cef65f4\"}, {\"url\": \"https://git.kernel.org/stable/c/4b09715f1504f1b6e8dff0e9643630610bc05141\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amd/display: Fix a potential buffer overflow in \u0027dp_dsc_clock_en_read()\u0027\\n\\nTell snprintf() to store at most 10 bytes in the output buffer\\ninstead of 30.\\n\\nFixes the below:\\ndrivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.214\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.153\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.83\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.23\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.11\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.2\", \"versionStartIncluding\": \"5.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9\", \"versionStartIncluding\": \"5.9\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T11:29:12.070Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-27045\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T11:29:12.070Z\", \"dateReserved\": \"2024-02-19T14:20:24.213Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-01T12:54:18.138Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.