CVE-2024-49970

drm/amd/display: Implement bounds check for stream encoder creation in DCN401

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
Oct 30, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Implement bounds check for stream encoder creation in DCN401

'stream_enc_regs' array is an array of dcn10_stream_enc_registers structures. The array is initialized with four elements, corresponding to the four calls to stream_enc_regs() in the array initializer. This means that valid indices for this array are 0, 1, 2, and 3.

The error message 'stream_enc_regs' 4 <= 5 below, is indicating that there is an attempt to access this array with an index of 5, which is out of bounds. This could lead to undefined behavior

Here, eng_id is used as an index to access the stream_enc_regs array. If eng_id is 5, this would result in an out-of-bounds access on the stream_enc_regs array.

Thus fixing Buffer overflow error in dcn401_stream_encoder_create

Found by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn401/dcn401_resource.c:1209 dcn401_stream_encoder_create() error: buffer overflow 'stream_enc_regs' 4 <= 5

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 664f12d9ebdfdfb9c05e5cb31f268e92fb9042feAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 00872dcc2a3e4a42155c2f3b7f21952a62301035Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before b219b46ad42df1dea9258788bcfea37181f3ccb2Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bdf606810210e8e07a0cdf1af3c467291363b295Affected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.