CVE-2024-26914
HIGHLinux kernel - Buffer Overflow
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix incorrect mpc_combine array size [why] MAX_SURFACES is per stream, while MAX_PLANES is per asic. The mpc_combine is an array that records all the planes per asic. Therefore MAX_PLANES should be used as the array size. Using MAX_SURFACES causes array overflow when there are more than 3 planes. [how] Use the MAX_PLANES for the mpc_combine array size.
Scores
CVSS v3
7.8
EPSS
0.0003
EPSS Percentile
8.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-129
Status
published
Affected Products (4)
linux/linux_kernel
< 6.7.6
linux/linux_kernel
linux/linux_kernel
linux/Kernel
< 6.7.6linux
Timeline
Published
Apr 17, 2024
Tracked Since
Feb 18, 2026