CVE-2024-49895

drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation

This commit addresses a potential index out of bounds issue in the `cm3_helper_translate_curve_to_degamma_hw_format` function in the DCN30 color management module. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS).

The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, the function returns false to indicate an error.

Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:338 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:339 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:340 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before ad89f83343a501890cf082c8a584e96b59fe4015Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before de6ee4f9e6b1c36b4fdc7c345c1a6de9e246093eAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f3ccd855b4395ce65f10dd37847167f52e122b70Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 0d38a0751143afc03faef02d55d31f70374ff843Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f5c3d306de91a4b69cfe3eedb72b42d452593e42Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c4fdc2d6fea129684b82bab90bb52fbace494a58Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bc50b614d59990747dd5aeced9ec22f9258991ffAffected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 5.10.227 through 5.10.*Not affected
  • 5.15.168 through 5.15.*Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.