Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42118
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42118 drm/amd/display: Do not return negative stream id for array

2024-07-3007:46:10
Linux
github.com
2
linux kernel
cve-2024-42118
vulnerability

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Do not return negative stream id for array

[WHY]
resource_stream_to_stream_idx returns an array index and it return -1
when not found; however, -1 is not a valid array index number.

[HOW]
When this happens, call ASSERT(), and return a zero instead.

This fixes an OVERRUN and an NEGATIVE_RETURNS issues reported by Coverity.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-42118