Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-36960— drm/vmwgfx: Fix invalid reads in fence signaled events

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于drm/vmwgfx 中存在无效读取。

CVSS 7.1 · High EPSS 0.29% · P20

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 8b7de6aa84682a3396544fd88cd457f95484573a< 2f527e3efd37c7c5e85e8aa86308856b619fa59f affected
8b7de6aa84682a3396544fd88cd457f95484573a< cef0962f2d3e5fd0660c8efb72321083a1b531a9 affected
8b7de6aa84682a3396544fd88cd457f95484573a< 3cd682357c6167f636aec8ac0efaa8ba61144d36 affected
8b7de6aa84682a3396544fd88cd457f95484573a< b7bab33c4623c66e3398d5253870d4e88c52dfc0 affected
8b7de6aa84682a3396544fd88cd457f95484573a< 0dbfc73670b357456196130551e586345ca48e1b affected
8b7de6aa84682a3396544fd88cd457f95484573a< 7b5fd3af4a250dd0a2a558e07b43478748eb5d22 affected
8b7de6aa84682a3396544fd88cd457f95484573a< deab66596dfad14f1c54eeefdb72428340d72a77 affected
8b7de6aa84682a3396544fd88cd457f95484573a< a37ef7613c00f2d72c8fc08bd83fb6cc76926c8c affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-36960

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
drm/vmwgfx: Fix invalid reads in fence signaled events
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于drm/vmwgfx 中存在无效读取。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 8b7de6aa84682a3396544fd88cd457f95484573a ~ 2f527e3efd37c7c5e85e8aa86308856b619fa59f -
Linux Linux 3.4 -

II. Public POCs for CVE-2024-36960

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-36960

请登录查看更多情报信息。

Mailing List Discussions for CVE-2024-36960 (2)

Other References for CVE-2024-36960 (8)

Same Patch Batch · Linux · 2024-06-03 · 5 CVEs total

CVE-2024-36964 8.8 HIGH fs/9p: only translate RWX permissions for plain 9P2000
CVE-2024-36961 7.8 HIGH thermal/debugfs: Fix two locking issues with thermal zone debug
CVE-2024-36963 7.8 HIGH tracefs: Reset permissions on remount if permissions are options
CVE-2024-36962 7.5 HIGH net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-36960

No comments yet

Leave a comment