Lucene search

K
cvelistLinuxCVELIST:CVE-2024-26914
HistoryApr 17, 2024 - 3:59 p.m.

CVE-2024-26914 drm/amd/display: fix incorrect mpc_combine array size

2024-04-1715:59:24
Linux
raw.githubusercontent.com
1
linux
kernel
vulnerability
cve-2024-26914
resolved
drm
amd
display
mpc_combine
array
size
max_surfaces
max_planes
asic
overflow

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix incorrect mpc_combine array size

[why]
MAX_SURFACES is per stream, while MAX_PLANES is per asic. The
mpc_combine is an array that records all the planes per asic. Therefore
MAX_PLANES should be used as the array size. Using MAX_SURFACES causes
array overflow when there are more than 3 planes.

[how]
Use the MAX_PLANES for the mpc_combine array size.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Related for CVELIST:CVE-2024-26914