In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Do not return negative stream id for array
[WHY] resource_stream_to_stream_idx returns an array index and it return -1 when not found; however, -1 is not a valid array index number.
[HOW] When this happens, call ASSERT(), and return a zero instead.
This fixes an OVERRUN and an NEGATIVE_RETURNS issues reported by Coverity.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-azure-fde | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub