Description
In the Linux kernel, the following vulnerability has been resolved:
media: aspeed: Fix memory overwrite if timing is 1600x900
When capturing 1600x900, system could crash when system memory usage is tight.
The way to reproduce this issue: 1. Use 1600x900 to display on host 2. Mount ISO through 'Virtual media' on OpenBMC's web 3. Run script as below on host to do sha continuously #!/bin/bash while [ [1] ]; do find /media -type f -printf '"%h/%f"\n' | xargs sha256sum done 4. Open KVM on OpenBMC's web
The size of macro block captured is 8x8. Therefore, we should make sure the height of src-buf is 8 aligned to fix this issue.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= d2b4387f3bdf016e266d23cf657465f557721488, < 4c823e4027dd1d6e88c31028dec13dd19bc7b02d; >= d2b4387f3bdf016e266d23cf657465f557721488, < c281355068bc258fd619c5aefd978595bede7bfe |
| Linux | Linux | 5.0 |
References
Timeline
- Published
- Sep 6, 2024
- Last modified
- Aug 4, 2026
- NVD status
- Modified