Riskcovery

CVE-2024-46813

drm/amd/display: Check link_index before accessing dc->links[]

State
Published
Severity
7.8 High
Published
Sep 27, 2024
Updated
Oct 30, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check link_index before accessing dc->links[]

[WHY & HOW] dc->links[] has max size of MAX_LINKS and NULL is return when trying to access with out-of-bound index.

This fixes 3 OVERRUN and 1 RESOURCE_LEAK issues reported by Coverity.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 8ad4c2cf6c1af18f556e5c591fb313b2982ddf60Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 032c5407a608ac3b2a98bf4fbda27d12c20c5887Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before ac04759b4a002969cf0f1384f1b8bb2001cfa782Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 8aa2864044b9d13e95fe224f32e808afbf79ecdfAffected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.87 through 6.6.*Not affected
  • 6.10.9 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.