CVE - CVE-2024-42121

CVE-ID
CVE-2024-42121	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msg_id before read or write [WHAT] msg_id is used as an array index and it cannot be a negative value, and therefore cannot be equal to MOD_HDCP_MESSAGE_ID_INVALID (-1). [HOW] Check whether msg_id is valid before reading and setting. This fixes 4 OVERRUN issues reported by Coverity.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/59d99deb330af206a4541db0c4da8f73880fba03 URL:https://git.kernel.org/stable/c/59d99deb330af206a4541db0c4da8f73880fba03 MISC:https://git.kernel.org/stable/c/9933eca6ada0cd612e19522e7a319bcef464c0eb URL:https://git.kernel.org/stable/c/9933eca6ada0cd612e19522e7a319bcef464c0eb MISC:https://git.kernel.org/stable/c/a31ea49dc8064a557565725cf045944307476a6e URL:https://git.kernel.org/stable/c/a31ea49dc8064a557565725cf045944307476a6e MISC:https://git.kernel.org/stable/c/ae91ffbc8b8d942e3e7f188728cad557b7ed5ee4 URL:https://git.kernel.org/stable/c/ae91ffbc8b8d942e3e7f188728cad557b7ed5ee4 MISC:https://git.kernel.org/stable/c/b5b8837d066cc182ff69fb5629ad32ade5484567 URL:https://git.kernel.org/stable/c/b5b8837d066cc182ff69fb5629ad32ade5484567 MISC:https://git.kernel.org/stable/c/fbb0701af9734cff13917a4b98b5ee9da2fde48d URL:https://git.kernel.org/stable/c/fbb0701af9734cff13917a4b98b5ee9da2fde48d
Assigning CNA
kernel.org
Date Record Created
20240729	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240729)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)