CVE-2024-27045

drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'

State: Published
Severity: 7.0 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'

Tell snprintf() to store at most 10 bytes in the output buffer instead of 30.

Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_debugfs.c:1508 dp_dsc_clock_en_read() error: snprintf() is printing too much 30 vs 10

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c06e09b76639657f284bfaf1cce29557a2515e85 to before ff28893c96c5e0927a4da10cd24a3522ca663515Affected c06e09b76639657f284bfaf1cce29557a2515e85 to before 440f059837418fac1695b65d3ebc6080d33be877Affected c06e09b76639657f284bfaf1cce29557a2515e85 to before d346b3e5b25c95d504478507eb867cd3818775abAffected c06e09b76639657f284bfaf1cce29557a2515e85 to before ad76fd30557d6a106c481e4606a981221ca525f7Affected c06e09b76639657f284bfaf1cce29557a2515e85 to before eb9327af3621d26b1d83f767c97a3fe8191a3a65Affected c06e09b76639657f284bfaf1cce29557a2515e85 to before cf114d8d4a8d78df272116a745bb43b48cef65f4Affected c06e09b76639657f284bfaf1cce29557a2515e85 to before 4b09715f1504f1b6e8dff0e9643630610bc05141Affected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

c06e09b76639657f284bfaf1cce29557a2515e85 to before ff28893c96c5e0927a4da10cd24a3522ca663515Affected
c06e09b76639657f284bfaf1cce29557a2515e85 to before 440f059837418fac1695b65d3ebc6080d33be877Affected
c06e09b76639657f284bfaf1cce29557a2515e85 to before d346b3e5b25c95d504478507eb867cd3818775abAffected
c06e09b76639657f284bfaf1cce29557a2515e85 to before ad76fd30557d6a106c481e4606a981221ca525f7Affected
c06e09b76639657f284bfaf1cce29557a2515e85 to before eb9327af3621d26b1d83f767c97a3fe8191a3a65Affected
c06e09b76639657f284bfaf1cce29557a2515e85 to before cf114d8d4a8d78df272116a745bb43b48cef65f4Affected
c06e09b76639657f284bfaf1cce29557a2515e85 to before 4b09715f1504f1b6e8dff0e9643630610bc05141Affected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.