CVE-2024-41061: drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport
[Why] Potential out of bounds access in dml2calculaterqanddlgparams() because the value of outloweststateidx used as an index for FCLKChangeSupport array can be greater than 1.
[How] Currently dml2 core specifies identical values for all FCLKChangeSupport elements. Always use index 0 in the condition to avoid out of bounds access.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41061?
CVE-2024-41061 has a high severity rating due to the potential for an out-of-bounds access that could compromise system stability and security.
How do I fix CVE-2024-41061?
To fix CVE-2024-41061, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.16-1.
Which Linux distributions are affected by CVE-2024-41061?
CVE-2024-41061 affects various distributions based on the Linux kernel up to version 6.9.11.
What component of the Linux kernel does CVE-2024-41061 impact?
CVE-2024-41061 impacts the DRM AMD display component within the Linux kernel.
Is there a workaround for CVE-2024-41061 if updating is not possible?
There is no specific workaround for CVE-2024-41061, and the recommended action is to update to the latest kernel versions.