CVE-2024-52557
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 7, 2025
CWE ID 190
Summary
CVE-2024-52557 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the zynqmp_dp_rate_get() function, where an integer overflow occurs when the expression drm_dp_bw_code_to_link_rate(dp->test.bw_code) * 10000 is evaluated using a 32-bit type for the constant. This could potentially lead to unintended behavior or security vulnerabilities. The vulnerability resolves Coverity issues CID 1636340 and CID 1635811 and has been corrected by updating the data type of the constant to a compatible 64-bit type.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX