Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-46818

drm/amd/display: Check gpio_id before used as array index

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array index [WHY & HOW] GPIO_ID_UNKNOWN (-1) is not a valid value for array index and therefore should be checked in advance. This fixes 5 OVERRUN issues reported by Coverity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 8520fdc8ecc38f240a8e9e7af89cca6739c3e790affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 40c2e8bc117cab8bca8814735f28a8b121654a84affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 0184cca30cad74d88f5c875d4e26999e26325700affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 276e3fd93e3beb5894eb1cc8480f9f417d51524daffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 08e7755f754e3d2cef7d3a7da538d33526bd6f7caffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 3d4198ab612ad48f73383ad3bb5663e6f0cdf406affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 2a5626eeb3b5eec7a36886f9556113dd93ec8ed6affected

Linux Linux

Default version status: affected

  • 4.15affected
  • 0 to < 4.15unaffected
  • 5.4.284 to ≤ 5.4.*unaffected
  • 5.10.226 to ≤ 5.10.*unaffected
  • 5.15.167 to ≤ 5.15.*unaffected
  • 6.1.109 to ≤ 6.1.*unaffected
  • 6.6.50 to ≤ 6.6.*unaffected
  • 6.10.9 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References