Riskcovery

CVE-2024-42118

drm/amd/display: Do not return negative stream id for array

State
Published
Severity
Not scored
Published
Jul 30, 2024
Updated
May 11, 2026
Reserved
Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Do not return negative stream id for array

[WHY] resource_stream_to_stream_idx returns an array index and it return -1 when not found; however, -1 is not a valid array index number.

[HOW] When this happens, call ASSERT(), and return a zero instead.

This fixes an OVERRUN and an NEGATIVE_RETURNS issues reported by Coverity.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before a76fa9c4f0fc0aa6f517da3fa7d7c23e8a32c7d0Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3ac31c9a707dd1c7c890b95333182f955e9dcb57Affected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.