AZL-62672
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-62672.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-62672
- Upstream
- Published
- 2025-04-01T16:15:29Z
- Modified
- 2026-04-01T05:20:07.223122Z
- Summary
- CVE-2025-21985 affecting package kernel 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix out-of-bound accesses
[WHAT & HOW] hpostreamtolinkencodermapping has size MAXHPODP2ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAXHPODP2_ENCODERS.
Similiarly, dispcfgstream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal.
- References