In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Avoid overflow from uint32t to uint8t
[WHAT & HOW] dmubrbcmd's rampingboundary has size of uint8t and it is assigned 0xFFFF. Fix it by changing it to uint8_t with value of 0xFF.
This fixes 2 INTEGER_OVERFLOW issues reported by Coverity.
[
{
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6b54900c564e35989cf6813e4071504fa0a90e0",
"deprecated": false,
"id": "CVE-2024-47661-21f07a43",
"signature_version": "v1",
"digest": {
"line_hashes": [
"325918135844718609396978399753691504263",
"82831379172448091320114949061381859697",
"301633588463451799089472046057701874041",
"266603473766897123291740026278583217637"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "dmub_abm_set_pipe",
"file": "drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6b54900c564e35989cf6813e4071504fa0a90e0",
"deprecated": false,
"id": "CVE-2024-47661-3c5bb3dd",
"signature_version": "v1",
"digest": {
"length": 737.0,
"function_hash": "206799854707511989456578740980220988194"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6b54900c564e35989cf6813e4071504fa0a90e0",
"deprecated": false,
"id": "CVE-2024-47661-62e0a8d8",
"signature_version": "v1",
"digest": {
"line_hashes": [
"325918135844718609396978399753691504263",
"82831379172448091320114949061381859697",
"301633588463451799089472046057701874041",
"266603473766897123291740026278583217637"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "dmub_abm_set_pipe",
"file": "drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30d1b783b6eeaf49d311a072c70d618d993d01ec",
"deprecated": false,
"id": "CVE-2024-47661-9531a818",
"signature_version": "v1",
"digest": {
"length": 737.0,
"function_hash": "206799854707511989456578740980220988194"
}
},
{
"signature_type": "Function",
"target": {
"function": "dmub_abm_set_pipe",
"file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6b54900c564e35989cf6813e4071504fa0a90e0",
"deprecated": false,
"id": "CVE-2024-47661-e02454f6",
"signature_version": "v1",
"digest": {
"length": 744.0,
"function_hash": "179232385857099435599893891830465965673"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30d1b783b6eeaf49d311a072c70d618d993d01ec",
"deprecated": false,
"id": "CVE-2024-47661-e4ac8c1a",
"signature_version": "v1",
"digest": {
"line_hashes": [
"325918135844718609396978399753691504263",
"82831379172448091320114949061381859697",
"301633588463451799089472046057701874041",
"266603473766897123291740026278583217637"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30d1b783b6eeaf49d311a072c70d618d993d01ec",
"deprecated": false,
"id": "CVE-2024-47661-ef07c287",
"signature_version": "v1",
"digest": {
"line_hashes": [
"325918135844718609396978399753691504263",
"82831379172448091320114949061381859697",
"301633588463451799089472046057701874041",
"266603473766897123291740026278583217637"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "dmub_abm_set_pipe",
"file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30d1b783b6eeaf49d311a072c70d618d993d01ec",
"deprecated": false,
"id": "CVE-2024-47661-f7836273",
"signature_version": "v1",
"digest": {
"length": 744.0,
"function_hash": "179232385857099435599893891830465965673"
}
}
]