CVE-2024-46804

HIGH

Linux Kernel < 5.10.226 - Improper Array Index Validation

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access [Why] Coverity reports OVERRUN warning. Do not check if array index valid. [How] Check msg_id valid and valid array index.

References (8)

[Mailing List] https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html

[Mailing List] https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

[Patch] https://git.kernel.org/stable/c/0ee4387c5a4b57ec733c3fb4365188d5979cd9c7

[Patch] https://git.kernel.org/stable/c/2a63c90c7a90ab2bd23deebc2814fc5b52abf6d2

[Patch] https://git.kernel.org/stable/c/4e70c0f5251c25885c31ee84a31f99a01f7cf50e

[Patch] https://git.kernel.org/stable/c/8b5ccf3d011969417be653b5a145c72dbd30472c

[Patch] https://git.kernel.org/stable/c/a3b5ee22a9d3a30045191da5678ca8451ebaea30

[Patch] https://git.kernel.org/stable/c/f338f99f6a04d03c802087d82a83561cbd5bdc99

Scores

CVSS v3 7.8

EPSS 0.0001

EPSS Percentile 2.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-129

Status published

Products (6)

linux/Kernel 5.11.0 - 5.15.167linux

linux/Kernel 5.16.0 - 6.1.109linux

linux/Kernel 5.5.0 - 5.10.226linux

linux/Kernel 6.2.0 - 6.6.50linux

linux/Kernel 6.7.0 - 6.10.9linux

linux/linux_kernel < 5.10.226

Published Sep 27, 2024

Tracked Since Feb 18, 2026