CVE-2024-38552

HIGH
Published Jun 19, 2024 Modified May 12, 2026 CWE-129

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes index out of bounds issue in the color transformation function. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, an error message is logged and the function returns false to indicate an error. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:405 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:406 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:407 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max

Is your site exposed to CVE-2024-38552?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-129 CWE-129

Affected Products

Vendor Product
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel

References

Advisories & Patches

https://git.kernel.org/stable/c/04bc4d1090c343025d69149ca669a27c5b9c34a7 https://git.kernel.org/stable/c/123edbae64f4d21984359b99c6e79fcde31c6123 https://git.kernel.org/stable/c/4e8c8b37ee84b3b19c448d2b8e4c916d2f5b9c86 https://git.kernel.org/stable/c/604c506ca43fce52bb882cff9c1fdf2ec3b4029c https://git.kernel.org/stable/c/63ae548f1054a0b71678d0349c7dc9628ddd42ca https://git.kernel.org/stable/c/7226ddf3311c5e5a7726ad7d4e7b079bb3cfbb29 https://git.kernel.org/stable/c/98b8a6bfd30d07a19cfacdf82b50f84bf3360869 https://git.kernel.org/stable/c/ced9c4e2289a786b8fa684d8893b7045ea53ef7e https://git.kernel.org/stable/c/e280ab978c81443103d7c61bdd1d8d708cf6ed6d https://git.kernel.org/stable/c/04bc4d1090c343025d69149ca669a27c5b9c34a7 https://git.kernel.org/stable/c/123edbae64f4d21984359b99c6e79fcde31c6123 https://git.kernel.org/stable/c/4e8c8b37ee84b3b19c448d2b8e4c916d2f5b9c86 https://git.kernel.org/stable/c/604c506ca43fce52bb882cff9c1fdf2ec3b4029c https://git.kernel.org/stable/c/63ae548f1054a0b71678d0349c7dc9628ddd42ca https://git.kernel.org/stable/c/7226ddf3311c5e5a7726ad7d4e7b079bb3cfbb29 https://git.kernel.org/stable/c/98b8a6bfd30d07a19cfacdf82b50f84bf3360869 https://git.kernel.org/stable/c/ced9c4e2289a786b8fa684d8893b7045ea53ef7e https://git.kernel.org/stable/c/e280ab978c81443103d7c61bdd1d8d708cf6ed6d

Frequently Asked Questions

What is CVE-2024-38552? +
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes index out of bounds issue in the color transformation function. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, an error message is logged and the function returns false to indicate an error. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:405 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:406 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:407 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max It has a CVSS v3.1 base score of 7.8 (HIGH).
How severe is CVE-2024-38552? +
CVE-2024-38552 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-38552? +
CVE-2024-38552 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-38552? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-0657

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent …
CVE-2025-66559

Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and …
CVE-2023-31309

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting …
CVE-2024-45569 9.8

Memory corruption while parsing the ML IE due to invalid frame content.
CVE-2024-24563 9.8

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, …
CVE-2024-31581 9.8

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-38552 — free, no signup required.