CVE-2024-46816

CVE-2024-46816

High · published September 27, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links

[Why]

Coverity report OVERRUN warning. There are

only max_links elements within dc->links. link

count could up to AMDGPU_DM_MAX_DISPLAY_INDEX 31.

[How]

Make sure link count less than max_links.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.4th percentile
Published
2024-09-27T17:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.10, < 6.10.96.10.9
References (8)
https://git.kernel.org/stable/c/13080d052c995aee14695a5b740c245121eb2bcc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/36c39a8dcce210649f2f45f252abaa09fcc1ae87 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c84632096722fd31251f0957fafc9e90d9a247fd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cf8b16857db702ceb8d52f9219a4613363e2b1cf · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e2411b6abf6e5d6c33d0450846673cdf536f0ba4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e3cd0d8362de47f613bfdf315b3f3a9ab71e66bf · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 27 SEP 12:35Z
    drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
    cvelistv5