CVE-2024-46815
kernel: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 27, 2024
Updated · October 1, 2026
Description
A negative-index out-of-bounds write vulnerability exists in the Linux kernel AMDGPU DCN2.1 display driver. The rn_notify_wm_ranges() function can access reader_wm_sets[num_valid_sets - 1] when num_valid_sets is zero, resulting in an out-of-bounds kernel memory write that may cause memory corruption and a denial of service
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 · Improper Validation of Array Index