CVE-2024-46811

HIGH

Linux Kernel < 6.6.50 - Improper Array Index Validation

Title source: rule
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box [Why] Coverity reports OVERRUN warning. soc.num_states could be 40. But array range of bw_params->clk_table.entries is 8. [How] Assert if soc.num_states greater than 8.

References (3)

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 4.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-129
Status published
Products (3)
linux/Kernel 4.15.0 - 6.6.50linux
linux/Kernel 6.7.0 - 6.10.9linux
linux/linux_kernel < 6.6.50
Published Sep 27, 2024
Tracked Since Feb 18, 2026