In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Skip finding free audio for unknown engine_id
[WHY]
ENGINE_ID_UNKNOWN = -1 and can not be used as an array index. Plus, it
also means it is uninitialized and does not need free audio.
[HOW]
Skip and return NULL.
This fixes 2 OVERRUN issues reported by Coverity.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws-5.15 | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-azure | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-azure | < any | UNKNOWN |
git.kernel.org/linus/1357b2165d9ad94faa4c4a20d5e2ce29c2ff29c3 (6.10-rc1)
git.kernel.org/stable/c/1357b2165d9ad94faa4c4a20d5e2ce29c2ff29c3
git.kernel.org/stable/c/874261358d31fc772f2823604167e670983cc1ca
git.kernel.org/stable/c/881fb6afc0004c5e6392ae2848f825bf051dae14
git.kernel.org/stable/c/95ad20ee3c4efbb91f9a4ab08e070aa3697f5879
git.kernel.org/stable/c/9eb4db08a808e3a3ba59193aeb84a57a6dc4d8c9
git.kernel.org/stable/c/afaaebdee9bb9f26d9e13cc34b33bd0a7bf59488
git.kernel.org/stable/c/eacca028a623f608607d02457122ee5284491e18
git.kernel.org/stable/c/ffa7bd3ca9cfa902b857d1dc9a5f46fededf86c8
launchpad.net/bugs/cve/CVE-2024-42119
nvd.nist.gov/vuln/detail/CVE-2024-42119
security-tracker.debian.org/tracker/CVE-2024-42119
www.cve.org/CVERecord?id=CVE-2024-42119