In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Do not return negative stream id for array
[WHY] resource_stream_to_stream_idx returns an array index and it return -1 when not found; however, -1 is not a valid array index number.
[HOW] When this happens, call ASSERT(), and return a zero instead.
This fixes an OVERRUN and an NEGATIVE_RETURNS issues reported by Coverity.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-defaultUpgrade reiserfs-kmp-default | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-azure | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub