CVE-2024-46804

HIGH

Linux Kernel - Out-of-Bounds Write in AMD Display HDCP DDC Access

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access [Why] Coverity reports OVERRUN warning. Do not check if array index valid. [How] Check msg_id valid and valid array index.

References (8)

Core 8

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html

Mailing List

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Patch

https://git.kernel.org/stable/c/2a63c90c7a90ab2bd23deebc2814fc5b52abf6d2

Patch

https://git.kernel.org/stable/c/0ee4387c5a4b57ec733c3fb4365188d5979cd9c7

Patch

https://git.kernel.org/stable/c/f338f99f6a04d03c802087d82a83561cbd5bdc99

Patch

https://git.kernel.org/stable/c/8b5ccf3d011969417be653b5a145c72dbd30472c

Patch

https://git.kernel.org/stable/c/a3b5ee22a9d3a30045191da5678ca8451ebaea30

Patch

https://git.kernel.org/stable/c/4e70c0f5251c25885c31ee84a31f99a01f7cf50e

Scores

CVSS v3 7.8

EPSS 0.0024

EPSS Percentile 15.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-129

Status published

Products (20)

linux/Kernel 5.11.0 - 5.15.167linux

linux/Kernel 5.16.0 - 6.1.109linux

linux/Kernel 5.5.0 - 5.10.226linux

linux/Kernel 6.2.0 - 6.6.50linux

linux/Kernel 6.7.0 - 6.10.9linux

Linux/Linux < 5.5

Linux/Linux 4c283fdac08abf3211533f70623c90a34f41d08d - 0ee4387c5a4b57ec733c3fb4365188d5979cd9c7

Linux/Linux 4c283fdac08abf3211533f70623c90a34f41d08d - 2a63c90c7a90ab2bd23deebc2814fc5b52abf6d2

Linux/Linux 4c283fdac08abf3211533f70623c90a34f41d08d - 4e70c0f5251c25885c31ee84a31f99a01f7cf50e

Linux/Linux 4c283fdac08abf3211533f70623c90a34f41d08d - 8b5ccf3d011969417be653b5a145c72dbd30472c

... and 10 more

Published Sep 27, 2024

Tracked Since Feb 18, 2026