CVE-2024-49970CWE-129

CVE-2024-49970

Medium · published October 21, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Implement bounds check for stream encoder creation in DCN401

'stream_enc_regs' array is an array of dcn10_stream_enc_registers

structures. The array is initialized with four elements, corresponding

to the four calls to stream_enc_regs() in the array initializer. This

means that valid indices for this array are 0, 1, 2, and 3.

The error message 'stream_enc_regs' 4 <= 5 below, is indicating that

there is an attempt to access this array with an index of 5, which is

out of bounds. This could lead to undefined behavior

Here, eng_id is used as an index to access the stream_enc_regs array. If

eng_id is 5, this would result in an out-of-bounds access on the

stream_enc_regs array.

Thus fixing Buffer overflow error in dcn401_stream_encoder_create

Found by smatch:

drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn401/dcn401_resource.c:1209 dcn401_stream_encoder_create() error: buffer overflow 'stream_enc_regs' 4 <= 5

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.1th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-10-21T22:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.11.36.11.3
References (3)
EPSS history
Timeline
  • 21 OCT 18:02Z
    drm/amd/display: Implement bounds check for stream encoder creation in DCN401
    cvelistv5