In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Ensure array index tg_inst won't be -1
[WHY & HOW] tginst will be a negative if timinggenerator_count equals 0, which should be checked before used.
This fixes 2 OVERRUN issues reported by Coverity.
[
{
"id": "CVE-2024-46730-44e76a50",
"target": {
"function": "acquire_otg_master_pipe_for_stream",
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a64284b9e1999ad5580debced4bc6d6adb28aad4",
"digest": {
"function_hash": "315033472295442152193089713356310375568",
"length": 1454.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2024-46730-970f8dae",
"target": {
"function": "acquire_otg_master_pipe_for_stream",
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@687fe329f18ab0ab0496b20ed2cb003d4879d931",
"digest": {
"function_hash": "315033472295442152193089713356310375568",
"length": 1454.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2024-46730-c3308e24",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@687fe329f18ab0ab0496b20ed2cb003d4879d931",
"digest": {
"threshold": 0.9,
"line_hashes": [
"27363311314317806486423839130613504075",
"75813972206159179013055608455771151207",
"241496332951075209856751940859653832067",
"306008926436872502877578042947319593725"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2024-46730-edc8cf4e",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a64284b9e1999ad5580debced4bc6d6adb28aad4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"27363311314317806486423839130613504075",
"75813972206159179013055608455771151207",
"241496332951075209856751940859653832067",
"306008926436872502877578042947319593725"
]
},
"deprecated": false,
"signature_version": "v1"
}
]