CVE-2024-50016: drm/amd/display: Avoid overflow assignment in link_dp_cts
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow assignment in linkdpcts samplingrate is an uint8t but is assigned an unsigned int, and thus it can overflow. As a result, samplingrate is changed to uint32t. Similarly, LINKQUALPATTERNSET has a size of 2 bits, and it should only be assigned to a value less or equal than 4. This fixes 2 INTEGEROVERFLOW issues reported by Coverity.
Other sources
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50016?
CVE-2024-50016 is considered a moderate severity vulnerability due to potential overflow issues in the Linux kernel.
How do I fix CVE-2024-50016?
To fix CVE-2024-50016, upgrade to the recommended Linux kernel versions 6.12.12-1 or 6.12.15-1.
Which versions of the Linux kernel are affected by CVE-2024-50016?
CVE-2024-50016 affects Linux kernel versions between 6.7 and 6.10.14 as well as specific versions up to 6.11.3.
What components are impacted by CVE-2024-50016?
CVE-2024-50016 impacts the AMD display functionality within the Linux kernel, specifically the dp_cts link.
Is CVE-2024-50016 specific to any Linux distributions?
CVE-2024-50016 is relevant to multiple Linux distributions that utilize the affected versions of the Linux kernel.