In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix out-of-bound accesses
[WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS.
Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-source-rt | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | No solution existsUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8 | Jun 26, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub