CVE-2024-39291

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() The function gfx_v9_4_3_init_microcode in gfx_v9_4_3.c was generating about potential truncation of output when using the snprintf function. The issue was due to the size of the buffer 'ucode_prefix' being too small to accommodate the maximum possible length of the string being written into it. The string being written is "amdgpu/%s_mec.bin" or "amdgpu/%s_rlc.bin", where %s is replaced by the value of 'chip_name'. The length of this string without the %s is 16 characters. The warning message indicated that 'chip_name' could be up to 29 characters long, resulting in a total of 45 characters, which exceeds the buffer size of 30 characters. To resolve this issue, the size of the 'ucode_prefix' buffer has been reduced from 30 to 15. This ensures that the maximum possible length of the string being written into the buffer will not exceed its size, thus preventing potential buffer overflow and truncation issues. Fixes the below with gcc W=1: drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c: In function ‘gfx_v9_4_3_early_init’: drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:52: warning: ‘%s’ directive output may be truncated writing up to 29 bytes into a region of size 23 [-Wformat-truncation=] 379 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_rlc.bin", chip_name); | ^~ ...... 439 | r = gfx_v9_4_3_init_rlc_microcode(adev, ucode_prefix); | ~~~~~~~~~~~~ drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:9: note: ‘snprintf’ output between 16 and 45 bytes into a destination of size 30 379 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_rlc.bin", chip_name); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:413:52: warning: ‘%s’ directive output may be truncated writing up to 29 bytes into a region of size 23 [-Wformat-truncation=] 413 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_mec.bin", chip_name); | ^~ ...... 443 | r = gfx_v9_4_3_init_cp_compute_microcode(adev, ucode_prefix); | ~~~~~~~~~~~~ drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:413:9: note: ‘snprintf’ output between 16 and 45 bytes into a destination of size 30 413 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_mec.bin", chip_name); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• CWE-120

• https://git.kernel.org/stable/c/19bd9537b6bc1c882df25206c15917214d8e9460Patch
• https://git.kernel.org/stable/c/acce6479e30f73ab0872e93a75aed1fb791d04ecPatch
• https://git.kernel.org/stable/c/f1b6a016dfa45cedc080d36fa5d6f22237d80e8bPatch
• https://git.kernel.org/stable/c/19bd9537b6bc1c882df25206c15917214d8e9460Patch
• https://git.kernel.org/stable/c/acce6479e30f73ab0872e93a75aed1fb791d04ecPatch
• https://git.kernel.org/stable/c/f1b6a016dfa45cedc080d36fa5d6f22237d80e8bPatch

Published

Jun 24, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-39286Incorrect execution-assigned permissions in the Linux kernel…3.3
• CVE-2024-39287Dorsett Controls Central Server update server has potential …7.5
• CVE-2024-39288A buffer overflow vulnerability exists in the internet.cgi s…7.2
• CVE-2024-39289A code execution vulnerability has been discovered in the Ro…7.8
• CVE-2024-3929The Content Views – Post Grid & Filter, Recent Posts, Catego…6.4
• CVE-2024-39290Insufficiently protected credentials issue exists in AIPHONE…6.5
• CVE-2024-39292In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-39293In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-39294A buffer overflow vulnerability exists in the adm.cgi set_wz…7.2
• CVE-2024-39296In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-39298In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-39299A buffer overflow vulnerability exists in the qos.cgi qos_st…7.2