CVE-2024-26699

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35clkmgr Why There is a potential memory access violation while iterating through array of dcn35 clks. How Limit iteration per array size...

CVE-2024-26700

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV platform: BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0 Oops: 0000 1 PREEMPT SMP NOPTI CPU: 4 PID: 917 Comm:...

PT-2024-30743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when switching from "Extend" to "Second Display Only" in the Linux kernel, specifically in the drm/amd/display component. This sometimes leads to calling resource get ot...

CVE-2024-26700: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV platform: BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0 Oops: 0000 1 PREEMPT SMP NOPTI CPU: 4 PID: 917 Comm:...

PT-2024-40685 · Git +1 · Openh264

Name of the Vulnerable Software and Affected Versions: Open-source software affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the WelsDec::CWelsDecoder class, specifically in the ReorderPicturesInDisplay,...

CVE-2024-26729: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null pointer dereference in dcdmubsrv Fixes potential null pointer dereference warnings in the dcdmubsrvcmdlistqueueexecute and dcdmubsrvishwpwrup functions. In both functions, the 'dcdmubsrv'...

CVE-2024-26728: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix null-pointer dereference on edid reading Use i2c adapter when there isn't auxmode in dclink to fix a null-pointer derefence that happens when running igt@kmsforceconnectorbasic in a system with DCN2.1 and HDM...

CVE-2024-26767: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations why: issues fixed: - comparison with wider integer type in loop condition which can cause infinite loops - pointer dereference before null check...

CVE-2024-26699: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35clkmgr Why There is a potential memory access violation while iterating through array of dcn35 clks. How Limit iteration per array size...

Better Comments < 1.5.6 - Subscriber+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow low privilege users such as Subscribers to perform Stored Cross-Site Scripting attacks. 1. From the menu on the left, go into "Users" and edit Subscriber user. 2. Upload a new avatar image and click "Updat...

PT-2024-21489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel, specifically in the drm/i915/dsc component. The issue arises from a macro that calculates the DSCC /DSCA PPS register address, whic...

CVE-2023-52634

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix disableotgwa logic Why When switching to another HDMI mode, we are unnecesarilly disabling/enabling FIFO causing both HPO and DIG registers to be set at the same time when only HPO is supposed to be set. This...

CVE-2024-26662

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix 'panelcntl' could be null in 'dcn21setbacklightlevel' 'panelcntl' structure used to control the display panel could be null, dereferencing it could lead to a null pointer access. Fixes the below:...

CVE-2024-26661

A NULL pointer dereference flaw was found in the Linux kernel in dcn21setpipe. This issue may lead to a crash...

CVE-2024-26660

A vulnerability was found in the DRM/AMD/Display module of the Linux Kernel. An out-of-bounds access exists in the 'streamencregs' array within DCN301, while accessing the array with 'engid,’ could lead to an out-of-bounds access beyond its four-element size, which can cause a system crash...

CVE-2024-1807

The Product Sort and Display for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the psadupdateproductcatcustommetaajax function in all versions up to, and including, 2.4.1. This makes it possible for unauthenticated attacke...

DEBIAN-CVE-2024-26662

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix 'panelcntl' could be null in 'dcn21setbacklightlevel' 'panelcntl' structure used to control the display panel could be null, dereferencing it could lead to a null pointer access. Fixes the below:...

DEBIAN-CVE-2024-26660

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN301 'streamencregs' array is an array of dcn10streamencregisters structures. The array is initialized with four elements, corresponding to the four calls t...

CVE-2024-26662

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix 'panelcntl' could be null in 'dcn21setbacklightlevel' 'panelcntl' structure used to control the display panel could be null, dereferencing it could lead to a null pointer access. Fixes the below:...

DEBIAN-CVE-2024-26661

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21setpipe' In "u32 otginst = pipectx-streamres.tg-inst;" pipectx-streamres.tg could be NULL, it is relying on the caller to ensure the tg is not NULL...