In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix out-of-bound accesses
[WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS.
Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-marvell | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub