What’s Vulnerable › Vulnerabilities

CVE-2024-46722: drm/amdgpu: fix mc_data out-of-bounds read warning

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-18 · updated 2026-06-17
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mc_data out-of-bounds read warning Clear warning that read mc_data[i-1] may out-of-bounds.

Affected products

• Linux kernel: before 4.19.322; from 4.20 before 5.4.284; from 5.5 before 5.10.226; from 5.11 before 5.15.167; from 5.16 before 6.1.109; from 6.2 before 6.6.50 — fixed in 4.19.322, 5.10.226, 5.15.167, 5.4.284, 6.1.109, 6.10.9

How to fix

Upgrade to a fixed version: Linux kernel 4.19.322, 5.10.226, 5.15.167, 5.4.284. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2097edede72ec5bb3869cf0205337d392fb2a553
• https://git.kernel.org/stable/c/310b9d8363b88e818afec97ca7652bd7fe3d0650
• https://git.kernel.org/stable/c/345bd3ad387f9e121aaad9c95957b80895e2f2ec
• https://git.kernel.org/stable/c/51dfc0a4d609fe700750a62f41447f01b8c9ea50
• https://git.kernel.org/stable/c/578ae965e8b90cd09edeb0252b50fa0503ea35c5
• https://git.kernel.org/stable/c/5fa4df25ecfc7b6c9006f5b871c46cfe25ea8826
• https://git.kernel.org/stable/c/b862a0bc5356197ed159fed7b1c647e77bc9f653
• https://git.kernel.org/stable/c/d0a43bf367ed640e527e8ef3d53aac1e71f80114
• https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Get alerted when CVE-2024-46722 or the next vulnerability affects your stack