CVE-2024-26914

Source
https://cve.org/CVERecord?id=CVE-2024-26914
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26914.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26914
Downstream
Related
Published
2024-04-17T15:59:24.453Z
Modified
2026-04-02T10:06:24.554504Z
Summary
drm/amd/display: fix incorrect mpc_combine array size
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix incorrect mpc_combine array size

[why] MAXSURFACES is per stream, while MAXPLANES is per asic. The mpccombine is an array that records all the planes per asic. Therefore MAXPLANES should be used as the array size. Using MAX_SURFACES causes array overflow when there are more than 3 planes.

[how] Use the MAXPLANES for the mpccombine array size.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26914.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c
Fixed
0bd8ef618a42d7e6ea3f701065264e15678025e3
Fixed
39079fe8e660851abbafa90cd55cbf029210661f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26914.json"