CVE-2022-48979 - drm/amd/display: fix array index out of bound error in DCN32 DML

Back Back to CVE browser

HIGH

drm/amd/display: fix array index out of bound error in DCN32 DML

Published Oct 21, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

[Why&How] LinkCapacitySupport array is indexed with the number of voltage states and not the number of max DPPs. Fix the error by changing the array declaration to use the correct (larger) array size of total number of voltage states.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.14
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.14
- Version
  6.0.13
  Status
  unaffected
  Constraints
  <=6.0.*
- Version
  6.1
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected

Linux

affected

Version	Status	Constraints
5.14	affected	-
0	unaffected	<5.14
6.0.13	unaffected	<=6.0.*
6.1	unaffected	<=*

Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel

Fix deferred
Red Hat Enterprise Linux 8

kernel-rt

Fix deferred
Red Hat Enterprise Linux 9

kernel

Fix deferred
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 8	kernel-rt	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-129

References (7)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48979		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2320739		Issue Tracking
https://git.kernel.org/stable/c/3d8a298b2e83b98042e6ec726e934f535b23e6aa		Patch
https://git.kernel.org/stable/c/aeffc8fb2174f017a10df114bc312f899904dc68		Patch
https://lore.kernel.org/linux-cve-announce/2024102146-CVE-2022-48979-d40f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48979
https://www.cve.org/CVERecord?id=CVE-2022-48979