CVE-2024-42121: drm/amd/display: Check index msg_id before read or write
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Check index msgid before read or write
[WHAT] msgid is used as an array index and it cannot be a negative value, and therefore cannot be equal to MODHDCPMESSAGEIDINVALID (-1).
[HOW] Check whether msgid is valid before reading and setting.
This fixes 4 OVERRUN issues reported by Coverity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.98-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.9.9-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In drm/amd/display, validate that msg_id is valid and non-negative before using it as an array index for reading or setting; reject MOD_HDCP_MESSAGE_ID_INVALID (-1).
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42121?
CVE-2024-42121 has a medium severity rating due to its potential impact on system stability and security.
How do I fix CVE-2024-42121?
To fix CVE-2024-42121, upgrade to the patched versions of the Linux kernel listed in the vulnerability advisory.
Which versions of the Linux kernel are affected by CVE-2024-42121?
CVE-2024-42121 affects various versions of the Linux kernel prior to the recommended patched versions.
Is CVE-2024-42121 a remote exploit vulnerability?
CVE-2024-42121 is not classified as a remote exploit vulnerability but may be exploited locally.
What components of the Linux system does CVE-2024-42121 impact?
CVE-2024-42121 impacts the drm/amd/display subsystem in the Linux kernel.