CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.251-4Fixed in 6.1.159-1Fixed in 6.1.170-3Fixed in 6.12.73-1Fixed in 6.12.86-1Fixed in 7.0.4-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.170-3~deb11u1 - Configuration
Update the kernel logic/configuration so that during amdgpu_dm initialization the link count is guaranteed to be less than max_links, since dc->links only contains max_links elements and link count could otherwise reach AMDGPU_DM_MAX_DISPLAY_INDEX (31).
Linux kernel (drm/amd/display amdgpu_dm) dc->links link count = Ensure link count < max_links
Event History
Frequently Asked Questions
What are the impacts of CVE-2024-46816?
CVE-2024-46816 may lead to an out-of-bounds access in the Linux kernel's amdgpu driver, potentially causing system instability.
What is the severity level of CVE-2024-46816?
CVE-2024-46816 has been classified with a medium severity level due to potential impacts on system performance.
How do I fix CVE-2024-46816?
To address CVE-2024-46816, upgrade your Linux kernel to version 6.12.11-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-46816?
CVE-2024-46816 affects Linux kernel versions from 6.10 to 6.10.9 and various earlier versions.
Is there a patch available for CVE-2024-46816?
Yes, a patch for CVE-2024-46816 is included in the recent release of the Linux kernel.