CVE-2024-46818

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46818
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array index [WHY & HOW] GPIO_ID_UNKNOWN (-1) is not a valid value for array index and therefore should be checked in advance. This fixes 5 OVERRUN issues reported by Coverity.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0184cca30cad74d88f5c875d4e26999e26325700 Patch
https://git.kernel.org/stable/c/08e7755f754e3d2cef7d3a7da538d33526bd6f7c Patch
https://git.kernel.org/stable/c/276e3fd93e3beb5894eb1cc8480f9f417d51524d Patch
https://git.kernel.org/stable/c/2a5626eeb3b5eec7a36886f9556113dd93ec8ed6 Patch
https://git.kernel.org/stable/c/3d4198ab612ad48f73383ad3bb5663e6f0cdf406 Patch
https://git.kernel.org/stable/c/40c2e8bc117cab8bca8814735f28a8b121654a84 Patch
https://git.kernel.org/stable/c/8520fdc8ecc38f240a8e9e7af89cca6739c3e790 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

04 Oct 2024, 17:18

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux linux Kernel
Linux
CWE CWE-129
References () https://git.kernel.org/stable/c/0184cca30cad74d88f5c875d4e26999e26325700 - () https://git.kernel.org/stable/c/0184cca30cad74d88f5c875d4e26999e26325700 - Patch
References () https://git.kernel.org/stable/c/08e7755f754e3d2cef7d3a7da538d33526bd6f7c - () https://git.kernel.org/stable/c/08e7755f754e3d2cef7d3a7da538d33526bd6f7c - Patch
References () https://git.kernel.org/stable/c/276e3fd93e3beb5894eb1cc8480f9f417d51524d - () https://git.kernel.org/stable/c/276e3fd93e3beb5894eb1cc8480f9f417d51524d - Patch
References () https://git.kernel.org/stable/c/2a5626eeb3b5eec7a36886f9556113dd93ec8ed6 - () https://git.kernel.org/stable/c/2a5626eeb3b5eec7a36886f9556113dd93ec8ed6 - Patch
References () https://git.kernel.org/stable/c/3d4198ab612ad48f73383ad3bb5663e6f0cdf406 - () https://git.kernel.org/stable/c/3d4198ab612ad48f73383ad3bb5663e6f0cdf406 - Patch
References () https://git.kernel.org/stable/c/40c2e8bc117cab8bca8814735f28a8b121654a84 - () https://git.kernel.org/stable/c/40c2e8bc117cab8bca8814735f28a8b121654a84 - Patch
References () https://git.kernel.org/stable/c/8520fdc8ecc38f240a8e9e7af89cca6739c3e790 - () https://git.kernel.org/stable/c/8520fdc8ecc38f240a8e9e7af89cca6739c3e790 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

30 Sep 2024, 12:45

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: comprobar gpio_id antes de usarlo como índice de matriz [POR QUÉ Y CÓMO] GPIO_ID_UNKNOWN (-1) no es un valor válido para el índice de matriz y, por lo tanto, se debe comprobar con antelación. Esto soluciona 5 problemas de OVERRUN informados por Coverity.

27 Sep 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-27 13:15

Updated : 2024-10-04 17:18

NVD link : CVE-2024-46818

Mitre link : CVE-2024-46818

CVE.ORG link : CVE-2024-46818

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index