CVE-2024-46871

drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX

HIGH

7.8

CVSS Score

Published: October 9, 2024 at 02:02 PM UTC

Updated: June 17, 2026 at 07:56 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Why & How] It actually exposes '6' types in enum dmub_notification_type. Not 5. Using smaller number to create array dmub_callback & dmub_thread_offload has potential to access item out of array bound. Fix it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

4.15 ≤ v < 5.15.1744.15 ≤ v < 6.1.1094.15 ≤ v < 6.10.94.15 ≤ v < 6.114.15 ≤ v < 6.6.505.16 ≤ v < 6.1.1096.2 ≤ v < 6.6.506.7 ≤ v < 6.10.94.154562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c

Vendor states this is fixed in 800a5ab673c4a61ca220cce177386723d91bdb37 (fixed)

Vendor states this is fixed in 9f404b0bc2df3880758fb3c3bc7496f596f347d7 (fixed)

Vendor states this is fixed in ad28d7c3d989fc5689581664653879d664da76f0 (fixed)

Vendor states this is fixed in c592b6355b9b57b8e59fc5978ce1e14f64488a98 (fixed)

Vendor states this is fixed in e1896f381d27466c26cb44b4450eae05cd59dfd0 (fixed)

Vendor states this is fixed in 4.15 (unaffected)

Vendor states this is fixed in 5.15.174 (unaffected)

Vendor states this is fixed in 6.1.109 (unaffected)

Vendor states this is fixed in 6.10.9 (unaffected)

Vendor states this is fixed in 6.11 (unaffected)

Vendor states this is fixed in 6.6.50 (unaffected)