Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42117
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42117 drm/amd/display: ASSERT when failing to find index by plane/stream id

2024-07-3007:46:09
Linux
github.com
1
linux kernel
drm/amd/display
vulnerability
fix
array index
assert
coverity

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: ASSERT when failing to find index by plane/stream id

[WHY]
find_disp_cfg_idx_by_plane_id and find_disp_cfg_idx_by_stream_id returns
an array index and they return -1 when not found; however, -1 is not a
valid index number.

[HOW]
When this happens, call ASSERT(), and return a positive number (which is
fewer than callers’ array size) instead.

This fixes 4 OVERRUN and 2 NEGATIVE_RETURNS issues reported by Coverity.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-42117