Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-46818 Details

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array index [WHY & HOW] GPIO_ID_UNKNOWN (-1) is not a valid value for array index and therefore should be checked in advance. This fixes 5 OVERRUN issues reported by Coverity.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0184cca30cad74d88f5c875d4e26999e26325700 kernel.orgPatch
https://git.kernel.org/stable/c/08e7755f754e3d2cef7d3a7da538d33526bd6f7c kernel.orgPatch
https://git.kernel.org/stable/c/276e3fd93e3beb5894eb1cc8480f9f417d51524d kernel.orgPatch
https://git.kernel.org/stable/c/2a5626eeb3b5eec7a36886f9556113dd93ec8ed6 kernel.orgPatch
https://git.kernel.org/stable/c/3d4198ab612ad48f73383ad3bb5663e6f0cdf406 kernel.orgPatch

see all 9 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-129Improper Validation of Array Index[email protected]

Affected Products

ProductVersions
linux linux kernel
< 5.4.284
>= 5.5, < 5.10.226
>= 5.11, < 5.15.167
>= 5.16, < 6.1.109
>= 6.2, < 6.6.50

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-46818
NVD Published Date:
Sep 27, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-46818 Details - Not Deferred