CVE-2024-42121

drm/amd/display: Check index msg_id before read or write

HIGH

7.8

CVSS Score

Published: July 30, 2024 at 07:46 AM UTC

Updated: June 17, 2026 at 07:48 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msg_id before read or write [WHAT] msg_id is used as an array index and it cannot be a negative value, and therefore cannot be equal to MOD_HDCP_MESSAGE_ID_INVALID (-1). [HOW] Check whether msg_id is valid before reading and setting. This fixes 4 OVERRUN issues reported by Coverity.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.15 ≤ v < 5.10.2224.15 ≤ v < 5.15.1634.15 ≤ v < 6.1.984.15 ≤ v < 6.104.15 ≤ v < 6.6.394.15 ≤ v < 6.9.95.11 ≤ v < 5.15.1635.16 ≤ v < 6.1.986.2 ≤ v < 6.6.396.7 ≤ v < 6.9.94.154562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c

Vendor states this is fixed in 59d99deb330af206a4541db0c4da8f73880fba03 (fixed)

Vendor states this is fixed in 9933eca6ada0cd612e19522e7a319bcef464c0eb (fixed)

Vendor states this is fixed in a31ea49dc8064a557565725cf045944307476a6e (fixed)

Vendor states this is fixed in ae91ffbc8b8d942e3e7f188728cad557b7ed5ee4 (fixed)

Vendor states this is fixed in b5b8837d066cc182ff69fb5629ad32ade5484567 (fixed)

Vendor states this is fixed in fbb0701af9734cff13917a4b98b5ee9da2fde48d (fixed)

Vendor states this is fixed in 4.15 (unaffected)

Vendor states this is fixed in 5.10.222 (unaffected)

Vendor states this is fixed in 5.15.163 (unaffected)

Vendor states this is fixed in 6.1.98 (unaffected)

Vendor states this is fixed in 6.10 (unaffected)

Vendor states this is fixed in 6.6.39 (unaffected)