CVE-2024-46815

Source
https://cve.org/CVERecord?id=CVE-2024-46815
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-46815.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-46815
Downstream
Related
Published
2024-09-27T12:35:57.062Z
Modified
2026-05-28T03:54:03.117701228Z
Summary
drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check numvalidsets before accessing readerwmsets[]

[WHY & HOW] numvalidsets needs to be checked to avoid a negative index when accessing readerwmsets[numvalidsets - 1].

This fixes an OVERRUN issue reported by Coverity.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46815.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c
Fixed
a72d4996409569027b4609414a14a87679b12267
Fixed
7c47dd2e92341f2989ab73dbed07f8894593ad7b
Fixed
c4a7f7c0062fe2c73f70bb7e335199e25bd71492
Fixed
b36e9b3104c4ba0f2f5dd083dcf6159cb316c996
Fixed
21f9cb44f8c60bf6c26487d428b1a09ad3e8aebf
Fixed
6a4a08e45e614cfa7a56498cdfaeb7fae2f07fa0
Fixed
b38a4815f79b87efb196cd5121579fc51e29a7fb

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-46815.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
5.4.284
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.226
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.167
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.109
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.50
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-46815.json"