CVE-2024-49971

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Increase array size of dummy_boolean

[WHY] dml2_core_shared_mode_support and dml_core_mode_support access the third element of dummy_boolean, i.e. hw_debug5 = &s->dummy_boolean[2], when dummy_boolean has size of 2. Any assignment to hw_debug5 causes an OVERRUN.

[HOW] Increase dummy_boolean's array size to 3.

This fixes 2 OVERRUN issues reported by Coverity.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux70839da6360500a82e4d5f78499284474cbed7c1 < e9e48b7bb9cf3b78f0305ef0144aaf61da0a83d8affected
LinuxLinux70839da6360500a82e4d5f78499284474cbed7c1 < 6d64d39486197083497a01b39e23f2f8474b35d3affected
LinuxLinux6.11affected
LinuxLinux0 < 6.11unaffected
LinuxLinux6.11.3 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References