Riskcovery

CVE-2021-47046

drm/amd/display: Fix off by one in hdmi_14_process_transaction()

State
Published
Severity
Not scored
Published
Feb 28, 2024
Updated
May 11, 2026
Reserved
Feb 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix off by one in hdmi_14_process_transaction()

The hdcp_i2c_offsets[] array did not have an entry for HDCP_MESSAGE_ID_WRITE_CONTENT_STREAM_TYPE so it led to an off by one read overflow. I added an entry and copied the 0x0 value for the offset from similar code in drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c.

I also declared several of these arrays as having HDCP_MESSAGE_ID_MAX entries. This doesn't change the code, but it's just a belt and suspenders approach to try future proof the code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4c283fdac08abf3211533f70623c90a34f41d08d to before 403c4528e5887af3deb9838cb77a557631d1e138Affected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to before 6a58310d5d1e5b02d0fc9b393ba540c9367bced5Affected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to before 080bd41d6478a64edf96704fddcda52b1fd5fed7Affected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to before 8e6fafd5a22e7a2eb216f5510db7aab54cc545c1Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.37 through 5.10.*Not affected
  • 5.11.21 through 5.11.*Not affected
  • 5.12.4 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.