In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix out-of-bound accesses
[WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS.
Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dtb-sprdUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azure | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub