Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47046

drm/amd/display: Fix off by one in hdmi_14_process_transaction()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix off by one in hdmi_14_process_transaction() The hdcp_i2c_offsets[] array did not have an entry for HDCP_MESSAGE_ID_WRITE_CONTENT_STREAM_TYPE so it led to an off by one read overflow. I added an entry and copied the 0x0 value for the offset from similar code in drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c. I also declared several of these arrays as having HDCP_MESSAGE_ID_MAX entries. This doesn't change the code, but it's just a belt and suspenders approach to try future proof the code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4c283fdac08abf3211533f70623c90a34f41d08d to < 403c4528e5887af3deb9838cb77a557631d1e138affected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to < 6a58310d5d1e5b02d0fc9b393ba540c9367bced5affected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to < 080bd41d6478a64edf96704fddcda52b1fd5fed7affected
  • 4c283fdac08abf3211533f70623c90a34f41d08d to < 8e6fafd5a22e7a2eb216f5510db7aab54cc545c1affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 5.10.37 to ≤ 5.10.*unaffected
  • 5.11.21 to ≤ 5.11.*unaffected
  • 5.12.4 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References