First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-50282

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()

Avoid a possible buffer overflow if size is larger than 4K.

(cherry picked from commit f5d873f5825b40d886d03bd2aede91d4cf002434)

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 673bdb4200c092692f83b5f7ba3df57021d52d29; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 8906728f2fbd6504cb488f4afdd66af28f330a7a; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 2faaee36e6e30f9efc7fa6bcb0bdcbe05c23f51f; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 4d75b9468021c73108b4439794d69e892b1d24e3
Linux	Linux	4.2

References

Timeline

Published: Nov 19, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-502837.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_ses CVE-2024-502845.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix the missing xa_store error check xa_store() can fail, it re CVE-2024-502855.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operations If Client send si CVE-2024-502867.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is a CVE-2024-502875.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: prevent the risk of a division by zero As reported by CVE-2024-502885.5In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using > 32 buffers The maximum CVE-2024-502895.5In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warned by smatch: drive CVE-2024-50294.8The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as CVE-2024-502905.5In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Cover CVE-2024-502915.5In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: add missing buffer index check dvb_vb2_expbuf() didn'CVE-2024-502925.5In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove CVE-2024-502937.8In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in __smc_create() Thanks t

CVE-2024-50282: High severity, CVSS 7.8 | Vulnix