CVE-2024-42117: drm/amd/display: ASSERT when failing to find index by plane/stream id
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: ASSERT when failing to find index by plane/stream id
[WHY] finddispcfgidxbyplaneid and finddispcfgidxbystreamid returns an array index and they return -1 when not found; however, -1 is not a valid index number.
[HOW] When this happens, call ASSERT(), and return a positive number (which is fewer than callers' array size) instead.
This fixes 4 OVERRUN and 2 NEGATIVERETURNS issues reported by Coverity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42117?
CVE-2024-42117 has been classified with a severity level that varies by the affected systems, primarily focusing on potential denial of service due to kernel assertion failures.
How do I fix CVE-2024-42117?
To remediate CVE-2024-42117, ensure that your Linux kernel is updated to a version that includes the fix, such as 5.10.223-1 or 6.1.123-1.
Which systems are affected by CVE-2024-42117?
CVE-2024-42117 primarily affects Debian-based systems running the specified vulnerable versions of the Linux kernel.
What impact does CVE-2024-42117 have on system performance?
The impact of CVE-2024-42117 on system performance includes potential crashes or instability when certain display configurations fail.
Is there a workaround for CVE-2024-42117?
There isn't a standard workaround for CVE-2024-42117; updating the kernel is the recommended approach to mitigate the issue.