In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] [WHY & HOW] num_valid_sets needs to be checked to avoid a negative index when accessing reader_wm_sets[num_valid_sets - 1]. This fixes an OVERRUN issue reported by Coverity.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/21f9cb44f8c60bf6c26487d428b1a09ad3e8aebf cve-icon cve-icon
https://git.kernel.org/stable/c/6a4a08e45e614cfa7a56498cdfaeb7fae2f07fa0 cve-icon cve-icon
https://git.kernel.org/stable/c/7c47dd2e92341f2989ab73dbed07f8894593ad7b cve-icon cve-icon
https://git.kernel.org/stable/c/a72d4996409569027b4609414a14a87679b12267 cve-icon cve-icon
https://git.kernel.org/stable/c/b36e9b3104c4ba0f2f5dd083dcf6159cb316c996 cve-icon cve-icon
https://git.kernel.org/stable/c/b38a4815f79b87efb196cd5121579fc51e29a7fb cve-icon cve-icon
https://git.kernel.org/stable/c/c4a7f7c0062fe2c73f70bb7e335199e25bd71492 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024092711-CVE-2024-46815-fce2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-46815 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-46815 cve-icon
History

Thu, 19 Dec 2024 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-129
Metrics threat_severity

Moderate

 threat_severity

Important

Wed, 20 Nov 2024 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Sun, 29 Sep 2024 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 28 Sep 2024 01:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 27 Sep 2024 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] [WHY & HOW] num_valid_sets needs to be checked to avoid a negative index when accessing reader_wm_sets[num_valid_sets - 1]. This fixes an OVERRUN issue reported by Coverity.
Title drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-09-27T12:35:57.062Z

Updated: 2024-12-19T09:23:44.876Z

Reserved: 2024-09-11T15:12:18.283Z

Link: CVE-2024-46815

cve-icon Vulnrichment

Updated: 2024-09-29T14:18:11.558Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-27T13:15:14.370

Modified: 2024-11-20T18:22:12.017

Link: CVE-2024-46815

cve-icon Redhat

Severity : Important

Publid Date: 2024-09-27T00:00:00Z

Links: CVE-2024-46815 - Bugzilla