Out-of-bounds Read in Linux
CVE-2024-42264
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Prevent out of bounds access in performance query extensions Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be copied into. (cherry picked from commit f32b5128d2c440368b5bf3a7a356823e235caabb)
Vulnerability class: Buffer Overflow
EPSS: 0.002 (12.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions bae7cb5d68001a8d4ceec5964dda74bb9aab7220, 6.8, 0
- Linux Linux_kernel — versions 6.11
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-42264?
- CVE-2024-42264 is a high-severity vulnerability in Linux, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2024-08-17.
- How severe is CVE-2024-42264?
- High severity. CVSS v3 base score is 7.8 out of 10.