What’s Vulnerable › Vulnerabilities

CVE-2024-46821: drm/amd/pm: Fix negative array index read

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-27 · updated 2026-06-17
• Weakness: CWE-129

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clk_idex as an index into an array pptable->DpmDescriptor. V2: fix clk_index return check (Tim Huang)

Affected products

• Debian Linux: 11.0
• Linux kernel: before 5.10.236; from 5.11 before 5.15.180; from 5.16 before 6.1.109; from 6.2 before 6.6.50; from 6.7 before 6.10.9 — fixed in 5.10.236, 5.15.180, 6.1.109, 6.10.9, 6.6.50

How to fix

Upgrade to a fixed version: Linux kernel 5.10.236, 5.15.180, 6.1.109, 6.10.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/06a3810010b525b9958424e344f0c25b09e128fa
• https://git.kernel.org/stable/c/4711b1347cb9f0c3083da6d87c624d75f9bd1d50
• https://git.kernel.org/stable/c/60f4a4bc3329e5cb8c4df0cc961f0d5ffd96e22d
• https://git.kernel.org/stable/c/befd1dc693c98bad69a701ede3a298698f0f9436
• https://git.kernel.org/stable/c/c8c19ebf7c0b202a6a2d37a52ca112432723db5f
• https://git.kernel.org/stable/c/e549cd6da1f21c34ba0f65adeca6a8aa9860b381
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Get alerted when CVE-2024-46821 or the next vulnerability affects your stack