CVE-2024-46813 drm/amd/display: Check link_index before accessing dc->links[]

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check linkindex before accessing dc-links WHY & HOW dc-links has max size of MAXLINKS and NULL is return when trying to access with out-of-bound index. This fixes 3 OVERRUN and 1 RESOURCELEAK issues reported by...

CVE-2024-46813 drm/amd/display: Check link_index before accessing dc->links[]

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check linkindex before accessing dc-links WHY & HOW dc-links has max size of MAXLINKS and NULL is return when trying to access with out-of-bound index. This fixes 3 OVERRUN and 1 RESOURCELEAK issues reported by...

CVE-2024-46812 drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration Why Coverity reports Memory - illegal accesses. How Skip inactive planes...

CVE-2024-46813 drm/amd/display: Check link_index before accessing dc->links[]

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check linkindex before accessing dc-links WHY & HOW dc-links has max size of MAXLINKS and NULL is return when trying to access with out-of-bound index. This fixes 3 OVERRUN and 1 RESOURCELEAK issues reported by...

CVE-2024-46811 drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range of bwparams-clktable.entries is 8. How Assert if soc.numstates great...

CVE-2024-46811 drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range of bwparams-clktable.entries is 8. How Assert if soc.numstates great...

CVE-2024-46811

CVE-2024-46811 affects the Linux kernel in the DRM/AMD display component. A potential out-of-bounds condition arises when accessing bw_params->clk_table.entries (8 entries) if soc.num_states can reach 40; the issue is fixed by asserting when soc.num_states exceeds 8 during fpu_update_bw_boundi...

CVE-2024-46811 drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range of bwparams-clktable.entries is 8. How Assert if soc.numstates great...

CVE-2024-46808 drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcdextendaddressrange Why & How ASSERT if return NULL from kcalloc...

CVE-2024-46808

CVE-2024-46808 affects the Linux kernel component drm/amd/display, where a missing NULL pointer check in dpcd_extend_address_range can lead to an assertion if kcalloc returns NULL. The connected Nessus entry confirms the vulnerability exists in Linux distros without a vendor patch and cites the s...

CVE-2024-46808 drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcdextendaddressrange Why & How ASSERT if return NULL from kcalloc...

CVE-2024-46808 drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcdextendaddressrange Why & How ASSERT if return NULL from kcalloc...

CVE-2024-46804 drm/amd/display: Add array index check for hdcp ddc access

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access Why Coverity reports OVERRUN warning. Do not check if array index valid. How Check msgid valid and valid array index...

CVE-2024-46804 drm/amd/display: Add array index check for hdcp ddc access

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access Why Coverity reports OVERRUN warning. Do not check if array index valid. How Check msgid valid and valid array index...

CVE-2024-46804

CVE-2024-46804 affects the Linux kernel’s DRM/AMD display path, specifically HDCP DDC access. The vulnerability stems from an array index overrun due to not validating the index, which could lead to overrun/W earlier reports. The fix adds proper checks: validate the message id (msg_id) and ensure...

CVE-2024-46802 drm/amd/display: added NULL check at start of dc_validate_stream

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

CVE-2024-46802

CVE-2024-46802 affects the Linux kernel’s DRM-AMD display path. The vulnerability is a NULL-dereference in drm/amd/display when validating a stream, caused by missing NULL checks for dc or stream. The fixed code adds a NULL check at the start of dc_validate_stream to prevent invalid memory access...

CVE-2024-46802 drm/amd/display: added NULL check at start of dc_validate_stream

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

ROS-20240927-06

A vulnerability in the VideoBridge component of Mozilla Firefox, Firefox ESR and Thunderbird email client browsers is related to errors in security settings. Exploitation of the vulnerability could allow an attacker, acting remotely, to bypass the protection mechanism of an isolated software...

golang: net/mail: comments in display names are incorrectly handled

A flaw was found in Go's net/mail standard library package. The ParseAddressList function incorrectly handles comments text within parentheses within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions made by programs using...