CVE-2024-56608

Summary

CVE-2024-56608 is a vulnerability in the Linux kernel's drm/amd/display driver. The issue lies in the function dcn21_link_encoder_create, where an out-of-bounds access occurs when the hpd_source index is used to reference the link_enc_hpd_regs array. This array has a fixed size, and the index was not being checked against the array's bounds before accessing it. The vulnerability has been resolved by adding a conditional check to ensure that the hpd_source index is within the valid range of the link_enc_hpd_regs array, preventing undefined behavior. This issue was identified through a use-after-free error reported by the User Space Address Sanitizer (UBSAN).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.