diff options
| author | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2024-04-15 12:20:55 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2024-04-15 12:20:55 +0200 |
| commit | 48928d5969492180c6cc600237e0113efa54a763 (patch) | |
| tree | b0723311c34b738a4fc93b7ac1f717c173b51d01 | |
| parent | 80c63b41cc7ad01e1a24526ac9af66e381574747 (diff) | |
| download | vulns-48928d5969492180c6cc600237e0113efa54a763.tar.gz | |
update CVE-2024-26817 as it shows up in 6.9-rc4
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| -rw-r--r-- | cve/published/2024/CVE-2024-26817.json | 15 | ||||
| -rw-r--r-- | cve/published/2024/CVE-2024-26817.mbox | 13 |
2 files changed, 17 insertions, 11 deletions
diff --git a/cve/published/2024/CVE-2024-26817.json b/cve/published/2024/CVE-2024-26817.json index 5202b336..0cac5bbc 100644 --- a/cve/published/2024/CVE-2024-26817.json +++ b/cve/published/2024/CVE-2024-26817.json @@ -58,6 +58,12 @@ "lessThan": "0c33d1115394", "status": "affected", "versionType": "git" + }, + { + "version": "1da177e4c3f4", + "lessThan": "3b0daecfeac0", + "status": "affected", + "versionType": "git" } ] }, @@ -108,6 +114,12 @@ "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "custom" + }, + { + "version": "6.9-rc4", + "lessThanOrEqual": "*", + "status": "unaffected", + "versionType": "original_commit_for_fix" } ] } @@ -133,6 +145,9 @@ }, { "url": "https://git.kernel.org/stable/c/0c33d11153949310d76631d8f4a4736519eacd3a" + }, + { + "url": "https://git.kernel.org/stable/c/3b0daecfeac0103aba8b293df07a0cbaf8b43f29" } ], "title": "amdkfd: use calloc instead of kzalloc to avoid integer overflow", diff --git a/cve/published/2024/CVE-2024-26817.mbox b/cve/published/2024/CVE-2024-26817.mbox index 03057fca..6985af5f 100644 --- a/cve/published/2024/CVE-2024-26817.mbox +++ b/cve/published/2024/CVE-2024-26817.mbox @@ -3,17 +3,6 @@ From: Greg Kroah-Hartman <gregkh@linuxfoundation.org> To: <linux-cve-announce@vger.kernel.org> Reply-to: <cve@kernel.org>, <linux-kernel@vger.kernel.org> Subject: CVE-2024-26817: amdkfd: use calloc instead of kzalloc to avoid integer overflow -Message-Id: <2024041311-CVE-2024-26817-e1a0@gregkh> -Content-Length: 2181 -Lines: 58 -X-Developer-Signature: v=1; a=openpgp-sha256; l=2240; - i=gregkh@linuxfoundation.org; h=from:subject:message-id; - bh=51l9Is09QmxtpZnALwdbJYO58G2TztUQP/w7UwroU5k=; - b=owGbwMvMwCRo6H6F97bub03G02pJDGlSmdvPeK65nMx6+KzXgfWLw5YvFXksn3e4bGabx6Tog - 09TPs+w64hlYRBkYpAVU2T5so3n6P6KQ4pehranYeawMoEMYeDiFICJdLMwzM85U7ruV6rP3COf - s6Jf3/5SV924+zDDggNv8y+zcMvO4Qo7nHZzR2L0pKZFywA= -X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; - fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Description =========== @@ -38,6 +27,7 @@ Affected and fixed versions Fixed in 6.1.86 with commit e6768c6737f4 Fixed in 6.6.27 with commit 315eb3c2df7e Fixed in 6.8.6 with commit 0c33d1115394 + Fixed in 6.9-rc4 with commit 3b0daecfeac0 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. @@ -73,3 +63,4 @@ issue can be found at these commits: https://git.kernel.org/stable/c/e6768c6737f4c02cba193a3339f0cc2907f0b86a https://git.kernel.org/stable/c/315eb3c2df7e4cb18e3eacfa18a53a46f2bf0ef7 https://git.kernel.org/stable/c/0c33d11153949310d76631d8f4a4736519eacd3a + https://git.kernel.org/stable/c/3b0daecfeac0103aba8b293df07a0cbaf8b43f29 |