SecuriTricks - CVE-2024-46804

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access [Why] Coverity reports OVERRUN warning. Do not check if array index valid. [How] Check msg_id valid and valid array index.

Product(s) Impacted

Vendor	Product	Versions
Linux	Linux Kernel	*

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-129

Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/

References

https://git.kernel.org/stable/c/0ee4387c5a4b57ec733c3fb4365188d5979cd9c7

https://git.kernel.org/stable/c/2a63c90c7a90ab2bd23deebc2814fc5b52abf6d2

https://git.kernel.org/stable/c/4e70c0f5251c25885c31ee84a31f99a01f7cf50e

https://git.kernel.org/stable/c/8b5ccf3d011969417be653b5a145c72dbd30472c

https://git.kernel.org/stable/c/a3b5ee22a9d3a30045191da5678ca8451ebaea30

https://git.kernel.org/stable/c/f338f99f6a04d03c802087d82a83561cbd5bdc99

CVSS Score

7.8 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: LOW
Scope: UNCHANGED
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View Vector String

Timeline

Published: Sept. 27, 2024, 1:15 p.m.
Last Modified: Oct. 4, 2024, 5:51 p.m.

Status : Analyzed

CVE has had analysis completed and all data associations made.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVE-2024-46804