CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Check numvalidsets before accessing readerwmsets[]
[WHY & HOW] numvalidsets needs to be checked to avoid a negative index when accessing readerwmsets[numvalidsets - 1].
This fixes an OVERRUN issue reported by Coverity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46815?
CVE-2024-46815 is classified as a medium-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-46815?
To resolve CVE-2024-46815, update to the recommended versions of the Linux kernel, specifically 5.10.226-1, 6.1.123-1, or higher.
What versions of the Linux kernel are affected by CVE-2024-46815?
CVE-2024-46815 affects Linux kernel versions prior to 5.10.226, 6.1.119-1~deb11u1, and other specified versions.
What types of systems are vulnerable to CVE-2024-46815?
Systems running vulnerable versions of the Linux kernel, including Debian distributions, are susceptible to CVE-2024-46815.
Who is responsible for fixing CVE-2024-46815?
The responsibility for fixing CVE-2024-46815 lies with the Linux kernel maintainers and users of affected distributions.