CVE-2024-46812

drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration

HIGH
7.8
CVSS Score
Published: September 27, 2024 at 12:35 PM UTC
Updated: August 5, 2026 at 12:04 PM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration [Why] Coverity reports Memory - illegal accesses. [How] Skip inactive planes.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.10.2364.15 ≤ v < 5.10.2364.15 ≤ v < 5.15.1804.15 ≤ v < 6.1.1094.15 ≤ v < 6.10.94.15 ≤ v < 6.114.15 ≤ v < 6.6.505.11 ≤ v < 5.15.1805.16 ≤ v < 6.1.1096.2 ≤ v < 6.6.506.7 ≤ v < 6.10.94.154562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c
Vendor states this is fixed in 2fd32a65f2e78eff0862c8fdf7815ca6bb44fb2e (fixed)
Vendor states this is fixed in 3300a039caf850376bc3416c808cd8879da412bb (fixed)
Vendor states this is fixed in 4331ae2788e779b11f3aad40c04be6c64831f2a2 (fixed)
Vendor states this is fixed in 8406158a546441b73f0b216aedacbf9a1e5748fb (fixed)
Vendor states this is fixed in a54f7e866cc73a4cb71b8b24bb568ba35c8969df (fixed)
Vendor states this is fixed in ee9d6df6d9172917d9ddbd948bb882652d5ecd29 (fixed)
Vendor states this is fixed in 4.15 (unaffected)
Vendor states this is fixed in 5.10.236 (unaffected)
Vendor states this is fixed in 5.15.180 (unaffected)
Vendor states this is fixed in 6.1.109 (unaffected)
Vendor states this is fixed in 6.10.9 (unaffected)
Vendor states this is fixed in 6.11 (unaffected)
Vendor states this is fixed in 6.6.50 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2fd32a65f2e78eff0862c8fdf7815ca6bb44fb2e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3300a039caf850376bc3416c808cd8879da412bb
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4331ae2788e779b11f3aad40c04be6c64831f2a2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8406158a546441b73f0b216aedacbf9a1e5748fb
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a54f7e866cc73a4cb71b8b24bb568ba35c8969df
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ee9d6df6d9172917d9ddbd948bb882652d5ecd29
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card