Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42119
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42119 drm/amd/display: Skip finding free audio for unknown engine_id

2024-07-3007:46:11
Linux
github.com
2
linux kernel
vulnerability
cve-2024-42119
drm
amd
display
audio
engine_id
overrun
coverity

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Skip finding free audio for unknown engine_id

[WHY]
ENGINE_ID_UNKNOWN = -1 and can not be used as an array index. Plus, it
also means it is uninitialized and does not need free audio.

[HOW]
Skip and return NULL.

This fixes 2 OVERRUN issues reported by Coverity.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial