Riskcovery

CVE-2024-46730

drm/amd/display: Ensure array index tg_inst won't be -1

State
Published
Severity
7.8 High
Published
Sep 18, 2024
Updated
Oct 30, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Ensure array index tg_inst won't be -1

[WHY & HOW] tg_inst will be a negative if timing_generator_count equals 0, which should be checked before used.

This fixes 2 OVERRUN issues reported by Coverity.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 1de84b6d65a7df30b5edc7208f828c4ecc8a7154Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 15403445b873a4ce45b2d4ecfb5928a025297282Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before a64284b9e1999ad5580debced4bc6d6adb28aad4Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 687fe329f18ab0ab0496b20ed2cb003d4879d931Affected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.10.9 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.