Threats tagged 'ghsa-5hhv-hrg6-cwc7'

CVE-2024-27008 is a high-severity vulnerability in the Linux kernel's drm nv04 driver. It involves an out-of-bounds access caused by incorrect interpretation of the Output Resource (dcb->or) value in the fabricate_dcb_output() function. The issue arises when dcb->or is zero, leading to an invalid index into the dac_users array. This flaw was identified by the Linux Verification Center and fixed by correcting the handling of the 'or' argument and using appropriate macros.