In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Prevent potential buffer overflow in map_hw_resources
Adds a check in the map_hw_resources function to prevent a potential buffer overflow. The function was accessing arrays using an index that could potentially be greater than the size of the arrays, leading to a buffer overflow.
Adds a check to ensure that the index is within the bounds of the arrays. If the index is out of bounds, an error message is printed and break it will continue execution with just ignoring extra data early to prevent the buffer overflow.
Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dml2/dml2_wrapper.c:79 map_hw_resources() error: buffer overflow 'dml2->v20.scratch.dml_to_dc_pipe_mapping.disp_cfg_to_stream_id' 6 <= 7 drivers/gpu/drm/amd/amdgpu/../display/dc/dml2/dml2_wrapper.c:81 map_hw_resources() error: buffer overflow 'dml2->v20.scratch.dml_to_dc_pipe_mapping.disp_cfg_to_plane_id' 6 <= 7
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kb-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub