CVE-2024-26660: drm/amd/display: Implement bounds check for stream encoder creation in DCN301
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Implement bounds check for stream encoder creation in DCN301
'streamencregs' array is an array of dcn10streamencregisters structures. The array is initialized with four elements, corresponding to the four calls to streamencregs() in the array initializer. This means that valid indices for this array are 0, 1, 2, and 3.
The error message 'streamencregs' 4 <= 5 below, is indicating that there is an attempt to access this array with an index of 5, which is out of bounds. This could lead to undefined behavior
Here, engid is used as an index to access the streamencregs array. If engid is 5, this would result in an out-of-bounds access on the streamencregs array.
Thus fixing Buffer overflow error in dcn301streamencodercreate reported by Smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn301/dcn301resource.c:1011 dcn301streamencodercreate() error: buffer overflow 'streamencregs' 4 <= 5
Other sources
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Implement bounds check for stream encoder creation in DCN301
The Linux kernel CVE team has assigned CVE-2024-26660 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040222-CVE-2024-26660-3f40@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26660?
CVE-2024-26660 is considered a critical vulnerability due to its potential impact on system security.
How do I fix CVE-2024-26660?
To fix CVE-2024-26660, upgrade the Linux kernel to version 5.15.149, 6.1.78, 6.6.17, 6.7.5, or 6.8 on Red Hat systems, or to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1 on Debian.
Which systems are affected by CVE-2024-26660?
CVE-2024-26660 affects various Linux kernel versions used in Red Hat and Debian distributions.
What components are compromised in CVE-2024-26660?
CVE-2024-26660 compromises the stream encoder creation in the AMD display driver within the Linux kernel.
When was CVE-2024-26660 identified?
CVE-2024-26660 was identified as a vulnerability impacting the Linux kernel and reported in early 2024.