CVE-2024-46811CWE-129

CVE-2024-46811

High · published September 27, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

[Why]

Coverity reports OVERRUN warning. soc.num_states could

be 40. But array range of bw_params->clk_table.entries is 8.

[How]

Assert if soc.num_states greater than 8.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-09-27T17:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel< 6.6.506.6.50
linux/linux_kernel≥ 6.7, < 6.10.96.10.9
References (3)
https://git.kernel.org/stable/c/188fd1616ec43033cedbe343b6579e9921e2d898 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4003bac784380fed1f94f197350567eaa73a409d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/aba188d6f4ebaf52acf13f204db2bd2c22072504 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 27 SEP 12:35Z
    drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
    cvelistv5