CVE-2024-46811

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

[Why] Coverity reports OVERRUN warning. soc.num_states could be 40. But array range of bw_params->clk_table.entries is 8.

[How] Assert if soc.num_states greater than 8.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 4003bac784380fed1f94f197350567eaa73a409daffected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < aba188d6f4ebaf52acf13f204db2bd2c22072504affected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 188fd1616ec43033cedbe343b6579e9921e2d898affected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux6.6.50 <= 6.6.*unaffected
LinuxLinux6.10.9 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References