CVE-2024-46730CWE-191

CVE-2024-46730

High · published September 18, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Ensure array index tg_inst won't be -1

[WHY & HOW]

tg_inst will be a negative if timing_generator_count equals 0, which

should be checked before used.

This fixes 2 OVERRUN issues reported by Coverity.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00229 · 13.0th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2024-09-18T11:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.10.96.10.9
References (3)
https://git.kernel.org/stable/c/15403445b873a4ce45b2d4ecfb5928a025297282 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/687fe329f18ab0ab0496b20ed2cb003d4879d931 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a64284b9e1999ad5580debced4bc6d6adb28aad4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 SEP 06:32Z
    drm/amd/display: Ensure array index tg_inst won't be -1
    cvelistv5