CVE - CVE-2024-49895

CVE-ID
CVE-2024-49895	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation This commit addresses a potential index out of bounds issue in the `cm3_helper_translate_curve_to_degamma_hw_format` function in the DCN30 color management module. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, the function returns false to indicate an error. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:338 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:339 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:340 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0d38a0751143afc03faef02d55d31f70374ff843 URL:https://git.kernel.org/stable/c/0d38a0751143afc03faef02d55d31f70374ff843 MISC:https://git.kernel.org/stable/c/ad89f83343a501890cf082c8a584e96b59fe4015 URL:https://git.kernel.org/stable/c/ad89f83343a501890cf082c8a584e96b59fe4015 MISC:https://git.kernel.org/stable/c/bc50b614d59990747dd5aeced9ec22f9258991ff URL:https://git.kernel.org/stable/c/bc50b614d59990747dd5aeced9ec22f9258991ff MISC:https://git.kernel.org/stable/c/c4fdc2d6fea129684b82bab90bb52fbace494a58 URL:https://git.kernel.org/stable/c/c4fdc2d6fea129684b82bab90bb52fbace494a58 MISC:https://git.kernel.org/stable/c/de6ee4f9e6b1c36b4fdc7c345c1a6de9e246093e URL:https://git.kernel.org/stable/c/de6ee4f9e6b1c36b4fdc7c345c1a6de9e246093e MISC:https://git.kernel.org/stable/c/f3ccd855b4395ce65f10dd37847167f52e122b70 URL:https://git.kernel.org/stable/c/f3ccd855b4395ce65f10dd37847167f52e122b70 MISC:https://git.kernel.org/stable/c/f5c3d306de91a4b69cfe3eedb72b42d452593e42 URL:https://git.kernel.org/stable/c/f5c3d306de91a4b69cfe3eedb72b42d452593e42
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)