CVE-2024-42064

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Skip pipe if the pipe idx not set properly

[why] Driver crashes when pipe idx not set properly

[how] Add code to skip the pipe that idx not set properly

A flaw was found in the Linux kernel AMD display driver (drm/amd/display), where the driver crashes when a display pipe index is not set properly. This is a low impact issue for Red Hat products: triggering the crash requires local access with high privileges and the consequence is a kernel crash (denial of service) only, with no impact on confidentiality or integrity. Red Hat therefore rates this flaw Low severity, which differs from the CVE.org rating of Important (CVSS 7.8), whose vector assumes high confidentiality and integrity impacts that are not supported by the technical evidence. The current Red Hat assessment marks Red Hat Enterprise Linux 6, 7, 8, and 9 (kernel and kernel-rt) and the Hosted OpenShift (ARO and OSD) kernel streams as not affected, while the Fedora community kernel is affected; a fix is being pursued for Fedora through the upstream kernel update that skips a pipe whose index is not set properly.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.