CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links[]
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Check linkindex before accessing dc->links[]
[WHY & HOW] dc->links[] has max size of MAXLINKS and NULL is return when trying to access with out-of-bound index.
This fixes 3 OVERRUN and 1 RESOURCELEAK issues reported by Coverity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46813?
CVE-2024-46813 is classified as a critical vulnerability in the Linux kernel, specifically affecting the AMD display driver.
How do I fix CVE-2024-46813?
To resolve CVE-2024-46813, update the Linux kernel to version 6.12.11-1 or later if you are using Debian.
Which versions of the Linux kernel are affected by CVE-2024-46813?
CVE-2024-46813 affects Linux kernel versions prior to 6.10.9, including certain versions of 5.10 and 6.1.
What types of vulnerabilities does CVE-2024-46813 address?
CVE-2024-46813 addresses out-of-bounds access issues that can lead to resource overrun vulnerabilities.
Is CVE-2024-46813 specific to any particular operating system?
CVE-2024-46813 primarily affects distributions that utilize the Linux kernel, particularly Debian-based systems.