CVE-2024-46729

HIGH

Linux Kernel < 6.10.9 - Out-of-Bounds Write

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop [WHY] fe_clk_en has size of 5 but sizeof(fe_clk_en) has byte size 20 which is lager than the array size. [HOW] Divide byte size 20 by its element size. This fixes 2 OVERRUN issues reported by Coverity.

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 7.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-131 CWE-787
Status published

Affected Products (2)

linux/linux_kernel < 6.10.9
linux/Kernel < 6.10.9linux

Timeline

Published Sep 18, 2024
Tracked Since Feb 18, 2026