CVE-2024-26914

drm/amd/display: fix incorrect mpc_combine array size

State
Published
Severity
7.8 High
Published
Apr 17, 2024
Updated
Aug 5, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix incorrect mpc_combine array size

[why] MAX_SURFACES is per stream, while MAX_PLANES is per asic. The mpc_combine is an array that records all the planes per asic. Therefore MAX_PLANES should be used as the array size. Using MAX_SURFACES causes array overflow when there are more than 3 planes.

[how] Use the MAX_PLANES for the mpc_combine array size.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 0bd8ef618a42d7e6ea3f701065264e15678025e3Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 39079fe8e660851abbafa90cd55cbf029210661fAffected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.7.6 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.