CVE-2024-42120

HIGH

Linux Kernel 4.15-6.9.8 - Out-of-Bounds Write in DRM AMD Display

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipe_ctx has a size of MAX_PIPES so checking its index before accessing the array. This fixes an OVERRUN issue reported by Coverity.

References (7)

Core 7

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Patch

https://git.kernel.org/stable/c/b2e9abc95583ac7bbb2c47da4d476a798146dfd6

Patch

https://git.kernel.org/stable/c/0b3702f9d43d163fd05e43b7d7e22e766dbef329

Patch

https://git.kernel.org/stable/c/d2c3645a4a5ae5d933b4116c305d9d82b8199dbf

Patch

https://git.kernel.org/stable/c/96bf81cc1bd058bb8af6e755a548e926e934dfd1

Patch

https://git.kernel.org/stable/c/c5ec2afeeee4c91cebc4eff6d4f1ecf4047259f4

Patch

https://git.kernel.org/stable/c/5396a70e8cf462ec5ccf2dc8de103c79de9489e6

Scores

CVSS v3 7.8

EPSS 0.0026

EPSS Percentile 17.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-129

Status published

Products (20)

linux/Kernel 4.15.0 - 5.10.222linux

linux/Kernel 5.11.0 - 5.15.163linux

linux/Kernel 5.16.0 - 6.1.98linux

linux/Kernel 6.2.0 - 6.6.39linux

linux/Kernel 6.7.0 - 6.9.9linux

Linux/Linux < 4.15

Linux/Linux 4.15

Linux/Linux 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c - 0b3702f9d43d163fd05e43b7d7e22e766dbef329

Linux/Linux 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c - 5396a70e8cf462ec5ccf2dc8de103c79de9489e6

Linux/Linux 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c - 96bf81cc1bd058bb8af6e755a548e926e934dfd1

... and 10 more

Published Jul 30, 2024

Tracked Since Feb 18, 2026