Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX

[Why & How]
It actually exposes '6' types in enum dmub_notification_type. Not 5. Using smaller
number to create array dmub_callback & dmub_thread_offload has potential to access
item out of array bound. Fix it.

Classification

CVE ID: CVE-2024-46871

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 5.08% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://git.kernel.org/stable/c/e1896f381d27466c26cb44b4450eae05cd59dfd0
https://git.kernel.org/stable/c/9f404b0bc2df3880758fb3c3bc7496f596f347d7
https://git.kernel.org/stable/c/800a5ab673c4a61ca220cce177386723d91bdb37
https://git.kernel.org/stable/c/c592b6355b9b57b8e59fc5978ce1e14f64488a98
https://git.kernel.org/stable/c/ad28d7c3d989fc5689581664653879d664da76f0

Timeline