In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Do not return negative stream id for array
[WHY] resource_stream_to_stream_idx returns an array index and it return -1 when not found; however, -1 is not a valid array index number.
[HOW] When this happens, call ASSERT(), and return a zero instead.
This fixes an OVERRUN and an NEGATIVE_RETURNS issues reported by Coverity.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-source | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azure | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub