CVE-2024-52559

Summary

CVE-2024-52559 is a vulnerability affecting the Linux kernel. In the drm/msm/gem driver, the function msm_ioctl_gem_submit() was found to be susceptible to an integer overflow issue. The variables "submit->cmd[i].size" and "submit->cmd[i].offset" are u32 values that can be provided by the user through the submit_lookup_cmds() function. This vulnerability could lead to an integer wrapping bug, potentially causing unintended behavior or system instability. To mitigate this issue, the use of size_add() is recommended as a preventative measure. The patch for this vulnerability can be found on Patchwork.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.