CVE-2024-46726

MEDIUM EPSS 13.7%

Published Sep 18, 20241y ago · Modified Jun 17, 20261w ago

5.5 CVSS 3.1

Medium

Published Sep 18, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow [WHY & HOW] Make sure vmid0p72_idx, vnom0p8_idx and vmax0p9_idx calculation will never overflow and exceess array size. This fixes 3 OVERRUN and 1 INTEGER_OVERFLOW issues reported by Coverity.

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

13.7% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-190 Integer Overflow or Wraparound Numeric Error

Affected Products 3

Vendor	Product	Version	Range
linux	linux_kernel	*	<6.1.109
linux	linux_kernel	*	≥6.2 – <6.6.50
linux	linux_kernel	*	≥6.7 – <6.10.9

References 5

git.kernel.org https://git.kernel.org/stable/c/3dc6bb57dab36b38b7374af0ac916174c146b6ed

Patch
git.kernel.org https://git.kernel.org/stable/c/733ae185502d30bbe79575167b6178cfb6c5d6bd

Patch
git.kernel.org https://git.kernel.org/stable/c/8e2734bf444767fed787305ccdcb36a2be5301a2

Patch
git.kernel.org https://git.kernel.org/stable/c/d705b5869f6b1b46ad5ceb1bd2a08c04f7e5003b

Patch
lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

git.kernel.org https://git.kernel.org/stable/c/3dc6bb57dab36b38b7374af0ac916174c146b6ed

Patch
git.kernel.org https://git.kernel.org/stable/c/733ae185502d30bbe79575167b6178cfb6c5d6bd

Patch
git.kernel.org https://git.kernel.org/stable/c/8e2734bf444767fed787305ccdcb36a2be5301a2

Patch
git.kernel.org https://git.kernel.org/stable/c/d705b5869f6b1b46ad5ceb1bd2a08c04f7e5003b

Patch