CVE-2022-48979CWE-129

CVE-2022-48979

High · published October 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix array index out of bound error in DCN32 DML

[Why&How]

LinkCapacitySupport array is indexed with the number of voltage states and

not the number of max DPPs. Fix the error by changing the array

declaration to use the correct (larger) array size of total number of

voltage states.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-10-22T00:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel< 6.0.136.0.13
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
https://git.kernel.org/stable/c/3d8a298b2e83b98042e6ec726e934f535b23e6aa · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/aeffc8fb2174f017a10df114bc312f899904dc68 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 21 OCT 20:05Z
    drm/amd/display: fix array index out of bound error in DCN32 DML
    cvelistv5