CVE-2024-46811
kernel: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 27, 2024
Updated · September 13, 2026
Description
A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from an out-of-bounds write within the fpu_update_bw_bounding_box function, where an array index can exceed its defined range. A local attacker with low privileges could exploit this to potentially cause a system crash (denial of service), gain elevated privileges, or access sensitive data.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 · Improper Validation of Array Index