CVE-2024-46811

Summary

CVE-2024-46811 is a recently identified vulnerability in the Linux kernel. Specifically, in the drm/amd/display driver, there is a potential index out-of-bounds issue in the function fpu_update_bw_bounding_box. Coverity scanning revealed a warning of potential array overrun. The source of the problem is the soc.num_states variable, which can have a value of 40, but the array range of bw_params->clk_table.entries is limited to only 8 entries. To mitigate this risk, an assertion has been implemented to prevent the index from exceeding the array bounds when soc.num_states is greater than 8.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.