CVE-2024-46818

drm/amd/display: Check gpio_id before used as array index

HIGH

7.8

CVSS Score

Published: September 27, 2024 at 12:35 PM UTC

Updated: August 5, 2026 at 12:04 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array index [WHY & HOW] GPIO_ID_UNKNOWN (-1) is not a valid value for array index and therefore should be checked in advance. This fixes 5 OVERRUN issues reported by Coverity.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.4.2844.15 ≤ v < 5.10.2264.15 ≤ v < 5.15.1674.15 ≤ v < 5.4.2844.15 ≤ v < 6.1.1094.15 ≤ v < 6.10.94.15 ≤ v < 6.114.15 ≤ v < 6.6.505.11 ≤ v < 5.15.1675.16 ≤ v < 6.1.1095.5 ≤ v < 5.10.2266.2 ≤ v < 6.6.506.7 ≤ v < 6.10.94.154562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c

Vendor states this is fixed in 0184cca30cad74d88f5c875d4e26999e26325700 (fixed)

Vendor states this is fixed in 08e7755f754e3d2cef7d3a7da538d33526bd6f7c (fixed)

Vendor states this is fixed in 276e3fd93e3beb5894eb1cc8480f9f417d51524d (fixed)

Vendor states this is fixed in 2a5626eeb3b5eec7a36886f9556113dd93ec8ed6 (fixed)

Vendor states this is fixed in 3d4198ab612ad48f73383ad3bb5663e6f0cdf406 (fixed)

Vendor states this is fixed in 40c2e8bc117cab8bca8814735f28a8b121654a84 (fixed)

Vendor states this is fixed in 8520fdc8ecc38f240a8e9e7af89cca6739c3e790 (fixed)

Vendor states this is fixed in 4.15 (unaffected)

Vendor states this is fixed in 5.10.226 (unaffected)

Vendor states this is fixed in 5.15.167 (unaffected)

Vendor states this is fixed in 5.4.284 (unaffected)

Vendor states this is fixed in 6.1.109 (unaffected)