CVE-2024-52559

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that.

Patchwork: https://patchwork.freedesktop.org/patch/624696/

This vulnerability is rated as Moderate because exploitation requires local access to the Direct Rendering Manager (DRM) device and is restricted to platforms utilizing Qualcomm Adreno graphics hardware. An unprivileged local user could supply manipulated command buffer dimensions to trigger an arithmetic wrapping condition in the kernel driver, resulting in a denial of service or potential memory corruption. Enterprise Red Hat installations generally run on architectures and hardware profiles where this specialized GPU driver is either unconfigured or absent, limiting the practical risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.