CVE-2024-46729

CVE-2024-46729 (Linux kernel) : Affected component is drm/amd/display. Root cause: incorrect size calculation for a loop due to fe_clk_en having size 5 but sizeof(fe_clk_en) equal to 20 bytes, leading to two overrun conditions. Mitigation: fix implemented by computing element count via dividing t...

CVE-2024-46729 drm/amd/display: Fix incorrect size calculation for loop

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop WHY feclken has size of 5 but sizeoffeclken has byte size 20 which is lager than the array size. HOW Divide byte size 20 by its element size. This fixes 2 OVERRUN issues...

CVE-2024-46729

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop WHY feclken has size of 5 but sizeoffeclken has byte size 20 which is lager than the array size. HOW Divide byte size 20 by its element size. This fixes 2 OVERRUN issues...

CVE-2024-46728 drm/amd/display: Check index for aux_rd_interval before using

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for auxrdinterval before using auxrdinterval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues reported by Coverity...

CVE-2024-46728 drm/amd/display: Check index for aux_rd_interval before using

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for auxrdinterval before using auxrdinterval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues reported by Coverity...

CVE-2024-46728 drm/amd/display: Check index for aux_rd_interval before using

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for auxrdinterval before using auxrdinterval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues reported by Coverity...

CVE-2024-46727 drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otgmaster NULL check within resourcelogpipetopologyupdate Why Coverity reports NULLRETURN warning. How Add otgmaster NULL check...

CVE-2024-46727 drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otgmaster NULL check within resourcelogpipetopologyupdate Why Coverity reports NULLRETURN warning. How Add otgmaster NULL check...

CVE-2024-46727 drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otgmaster NULL check within resourcelogpipetopologyupdate Why Coverity reports NULLRETURN warning. How Add otgmaster NULL check...

CVE-2024-46726 drm/amd/display: Ensure index calculation will not overflow

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow WHY & HOW Make sure vmid0p72idx, vnom0p8idx and vmax0p9idx calculation will never overflow and exceess array size. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues...

CVE-2024-46726 drm/amd/display: Ensure index calculation will not overflow

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow WHY & HOW Make sure vmid0p72idx, vnom0p8idx and vmax0p9idx calculation will never overflow and exceess array size. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues...

CVE-2024-46726

CVE-2024-46726 (Linux kernel, drm/amd/display) fixes overflow/overrun in index calculations (vmid0p72_idx, vnom0p8_idx, vmax0p9_idx) to prevent array size overflow. The patch resolves 3 OVERRUNs and 1 INTEGER_OVERFLOW reported by Coverity; affected AMD display path. Remediation is to apply the up...

CVE-2024-46714 drm/amd/display: Skip wbscl_set_scaler_filter if filter is null

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbsclsetscalerfilter if filter is null Callers can pass null in filter i.e. from returned from the function wbsclgetfiltercoeffs16p and a null check is added to ensure that is not the case. This fixes 4...

CVE-2024-46714 drm/amd/display: Skip wbscl_set_scaler_filter if filter is null

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbsclsetscalerfilter if filter is null Callers can pass null in filter i.e. from returned from the function wbsclgetfiltercoeffs16p and a null check is added to ensure that is not the case. This fixes 4...

CVE-2024-46714

CVE-2024-46714 in the Linux kernel is addressed by a fix in the DRM/AMD display path: the code now skips the wbscl_set_scaler_filter when the filter is null, preventing a potential NULL return from wbscl_get_filter_coeffs_16p from causing a null dereference. A null check was added to ensure filte...

CVE-2024-46714 drm/amd/display: Skip wbscl_set_scaler_filter if filter is null

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbsclsetscalerfilter if filter is null Callers can pass null in filter i.e. from returned from the function wbsclgetfiltercoeffs16p and a null check is added to ensure that is not the case. This fixes 4...

CVE-2024-46694

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

CVE-2024-46694

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

UBUNTU-CVE-2024-46694

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

CVE-2024-46694 drm/amd/display: avoid using null object of framebuffer

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...