In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix potential index out of bounds in color transformation function
Fixes index out of bounds issue in the color transformation function. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS).
The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, an error message is logged and the function returns false to indicate an error.
Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:405 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:406 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:407 cm_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftool | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade dtb-nvidia | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-awsUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-azure-lts-22.04 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub