CVE-2024-38549: linux
Vulnerability summary
CVE-2024-38549 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 32 · Related 28Timeline
- 19-06-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtk_drm_gem_obj Add a check to mtk_drm_gem_init if we attempt to allocate a GEM object of 0 bytes. Currently, no such check exists and the kernel will panic if a userspace application attempts to allocate a 0x0 GBM buffer. Tested by attempting to allocate a 0x0 GBM buffer on an MT8188 and verifying that we now return EINVAL.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
0.00 pp
From 0.28% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu127 products
- linuxAll versions (No fix recorded) | < 5.4.0-192.212 | < 5.15.0-121.131 | < 6.8.0-40.40
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1130.140 | < 5.15.0-1069.75 | < 6.8.0-1013.14
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 79078880795478d551a05acc41f957700030d364 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < be34a1b351ea7faeb15dde8c44fe89de3980ae67 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < d17b75ee9c2e44d3a3682c4ea5ab713ea6073350 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 0e3b6f9123726858cac299e1654e3d20424cabe4 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 13562c2d48c9ee330de1077d00146742be368f05 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < af26ea99019caee1500bf7e60c861136c0bf8594 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 9489951e3ae505534c4013db4e76b1b5a3151ac7 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < fb4aabdb1b48c25d9e1ee28f89440fd2ce556405 | ≥ 119f5173628aa7a0c3cf9db83460d40709e8241d, < 1e4350095e8ab2577ee05f8c3b044e661b5af9a0 | 4.7
- linux_kernel≥ 4.7, < 4.19.316 | ≥ 4.20, < 5.4.278 | ≥ 5.5, < 5.10.219 | ≥ 5.11, < 5.15.161 | ≥ 5.16, < 6.1.93 | ≥ 6.2, < 6.6.33 | ≥ 6.7, < 6.8.12 | ≥ 6.9, < 6.9.3
Debian1 product
- linux< 6.1.94-1 | < 6.8.12-1
3 vendors · 130 products
