Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase array size of dummy_boolean [WHY] dml2_core_shared_mode_support and dml_core_mode_support access the third element of dummy_boolean, i.e. hw_debug5 = &s->dummy_boolean[2], when dummy_boolean has size of 2. Any assignment to hw_debug5 causes an OVERRUN. [HOW] Increase dummy_boolean's array size to 3. This fixes 2 OVERRUN issues reported by Coverity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 70839da6360500a82e4d5f78499284474cbed7c1 before e9e48b7bb9cf3b78f0305ef0144aaf61da0a83d8; affected 70839da6360500a82e4d5f78499284474cbed7c1 before 6d64d39486197083497a01b39e23f2f8474b35d3 |
| Linux / Linux | affected 6.11; unaffected 0 before 6.11; unaffected 6.11.3 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e9e48b7bb9cf3b78f0305ef0144aaf61da0a83d8
- https://git.kernel.org/stable/c/6d64d39486197083497a01b39e23f2f8474b35d3
ADP enrichment
No English description supplied.
No references supplied.