What is CVE-2024-49984?

CVE-2024-49984 is a high-severity vulnerability in Linux, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2024-10-21.

How severe is CVE-2024-49984?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2024-49984 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Linux

CVE-2024-49984

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Prevent out of bounds access in performance query extensions Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be copied into.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (15.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions bae7cb5d68001a8d4ceec5964dda74bb9aab7220, 6.8, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-49984?: CVE-2024-49984 is a high-severity vulnerability in Linux, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2024-10-21.
How severe is CVE-2024-49984?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2024-49984 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.