CVE-2024-26699: drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix array-index-out-of-bounds in dcn35clkmgr
[Why] There is a potential memory access violation while iterating through array of dcn35 clks.
[How] Limit iteration per array size.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26699?
CVE-2024-26699 is classified as a medium-severity vulnerability due to its potential to cause memory access violations in the Linux kernel.
How do I fix CVE-2024-26699?
To mitigate CVE-2024-26699, upgrade to the latest version of the Linux kernel that includes the patch addressing the array-index-out-of-bounds issue.
Which versions of the Linux kernel are affected by CVE-2024-26699?
CVE-2024-26699 affects versions of the Linux kernel up to 6.7.6 and specific release candidates of 6.8 up to rc4.
What components in the Linux kernel are impacted by CVE-2024-26699?
CVE-2024-26699 primarily impacts the drm/amd/display component of the Linux kernel associated with dcn35 clkmgr.
Can CVE-2024-26699 lead to exploitation in a production environment?
Yes, CVE-2024-26699 could potentially be exploited in a production environment, leading to memory corruption or crashes if left unaddressed.