CVE-2024-46813

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-46813
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46813.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-46813
Downstream
AZL (1)
BELL (1)
CLSA (8)
DEBIAN (1)
ECHO (1)
OESA (4)
ROOT (3)
SUSE (18)
UBUNTU (1)
Related
SUSE (18)
Published
2024-09-27T12:35:55Z
Modified
2026-11-01T02:30:46Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
drm/amd/display: Check link_index before accessing dc->links[]
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check link_index before accessing dc->links[]

[WHY & HOW] dc->links[] has max size of MAX_LINKS and NULL is return when trying to access with out-of-bound index.

This fixes 3 OVERRUN and 1 RESOURCE_LEAK issues reported by Coverity.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46813.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c
Fixed
8ad4c2cf6c1af18f556e5c591fb313b2982ddf60
Fixed
032c5407a608ac3b2a98bf4fbda27d12c20c5887
Fixed
ac04759b4a002969cf0f1384f1b8bb2001cfa782
Fixed
8aa2864044b9d13e95fe224f32e808afbf79ecdf

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46813.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.87
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46813.json"