Riskcovery

CVE-2024-46811

drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

State
Published
Severity
7.3 High
Published
Sep 27, 2024
Updated
Oct 30, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

[Why] Coverity reports OVERRUN warning. soc.num_states could be 40. But array range of bw_params->clk_table.entries is 8.

[How] Assert if soc.num_states greater than 8.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 6d8685dd9718e0613f7c64253500874021b9efc9Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 4003bac784380fed1f94f197350567eaa73a409dAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before aba188d6f4ebaf52acf13f204db2bd2c22072504Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 188fd1616ec43033cedbe343b6579e9921e2d898Affected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.50 through 6.6.*Not affected
  • 6.10.9 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.