CVE-2024-46729: drm/amd/display: Fix incorrect size calculation for loop

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-18 · updated 2026-06-17
Weakness: CWE-131

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop [WHY] fe_clk_en has size of 5 but sizeof(fe_clk_en) has byte size 20 which is lager than the array size. [HOW] Divide byte size 20 by its element size. This fixes 2 OVERRUN issues reported by Coverity.

Affected products

Linux kernel: from 4.15 before 6.10.9 — fixed in 6.10.9

How to fix

Upgrade to a fixed version: Linux kernel 6.10.9. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/3941a3aa4b653b69876d894d08f3fff1cc965267
https://git.kernel.org/stable/c/712be65b3b372a82bff0865b9c090147764bf1c4

Get alerted when CVE-2024-46729 or the next vulnerability affects your stack