In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Check index msg_id before read or write
[WHAT] msgid is used as an array index and it cannot be a negative value, and therefore cannot be equal to MODHDCPMESSAGEID_INVALID (-1).
[HOW] Check whether msg_id is valid before reading and setting.
This fixes 4 OVERRUN issues reported by Coverity.
[
{
"signature_version": "v1",
"id": "CVE-2024-42121-36819cea",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a31ea49dc8064a557565725cf045944307476a6e",
"target": {
"function": "read",
"file": "drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"
},
"deprecated": false,
"digest": {
"length": 672.0,
"function_hash": "3176388473222692116018313083191135056"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-42121-5adf6b7d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a31ea49dc8064a557565725cf045944307476a6e",
"target": {
"function": "write",
"file": "drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"
},
"deprecated": false,
"digest": {
"length": 768.0,
"function_hash": "1073612990968129447102067741282805066"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-42121-d27a19dd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a31ea49dc8064a557565725cf045944307476a6e",
"target": {
"file": "drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"97862808713319515141694127029121532210",
"264849976257350988695928992307158390444",
"203857303069228396628091498281290300511",
"97862808713319515141694127029121532210",
"264849976257350988695928992307158390444",
"203857303069228396628091498281290300511"
]
},
"signature_type": "Line"
}
]