• CVE-2024-41061

发布时间: 2024年8月28日

修改时间: 2024年8月28日

概要

In the Linux kernel, the following vulnerability has been resolved:drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport[Why]Potential out of bounds access in dml2_calculate_rq_and_dlg_params()because the value of out_lowest_state_idx used as an index for FCLKChangeSupportarray can be greater than 1.[How]Currently dml2 core specifies identical values for all FCLKChangeSupportelements. Always use index 0 in the condition to avoid out of bounds access.

CVSS v3 指标

NVD openEuler
CVSS评分 7.8 7.8
Attack Vector Local Local
Attack Complexity Low Low
Privileges Required Low Low
User Interaction None None
Scope Unchanged Unchanged
Confidentiality High High
Integrity High High
Availability High High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-3465 In the Linux kernel, the following vulnerability has been resolved:drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport[Why]Potential out of bounds access in dml2_calculate_rq_and_dlg_params()because the value of out_lowest_state_idx used as an index for FCLKChangeSupportarray can be greater than 1.[How]Currently dml2 core specifies identical values for all FCLKChangeSupportelements. Always use index 0 in the condition to avoid out of bounds access. 2024年8月28日

影响产品

产品 状态
KY3.4-5 kernel Unaffected
KY3.5.2 kernel Unaffected
KY3.5.3 kernel Unaffected
V6 kernel Unaffected