CVE-2024-26797

drm/amd/display: Prevent potential buffer overflow in map_hw_resources

High · published April 4, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Prevent potential buffer overflow in map_hw_resources

Adds a check in the map_hw_resources function to prevent a potential

buffer overflow. The function was accessing arrays using an index that

could potentially be greater than the size of the arrays, leading to a

buffer overflow.

Adds a check to ensure that the index is within the bounds of the

arrays. If the index is out of bounds, an error message is printed and

break it will continue execution with just ignoring extra data early to

prevent the buffer overflow.

Reported by smatch:

drivers/gpu/drm/amd/amdgpu/../display/dc/dml2/dml2_wrapper.c:79 map_hw_resources() error: buffer overflow 'dml2->v20.scratch.dml_to_dc_pipe_mapping.disp_cfg_to_stream_id' 6 <= 7

drivers/gpu/drm/amd/amdgpu/../display/dc/dml2/dml2_wrapper.c:81 map_hw_resources() error: buffer overflow 'dml2->v20.scratch.dml_to_dc_pipe_mapping.disp_cfg_to_plane_id' 6 <= 7

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Published
2024-04-04T08:20Z
EPSS history
Timeline
  • 04 APR 08:20Z
    drm/amd/display: Prevent potential buffer overflow in map_hw_resources
    cvelistv5