Log in Start free

Vulnerability · Published Oct 21, 2024 · Assigned by Linux

CVE-2022-48979drm/amd/display: fix array index out of bound error in DCN32 DML

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 86.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array index out of bound error in DCN32 DML [Why&How] LinkCapacitySupport array is indexed with the number of voltage states and not the number of max DPPs. Fix the error by changing the array declaration to use the correct (larger) array size of total number of voltage states.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.4-1DEBIAN-CVE-2022-48979
Debian:13linux6.1.4-1DEBIAN-CVE-2022-48979
Debian:14linux6.1.4-1DEBIAN-CVE-2022-48979
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2022-48979
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2022-48979
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2022-48979

Affected products (as reported)

VendorProductVersions
Linux Linux 74458c081fcfb0423877e630de2746daefdb16e4 – before 3d8a298b2e83b98042e6ec726e934f535b23e6aa74458c081fcfb0423877e630de2746daefdb16e4 – before aeffc8fb2174f017a10df114bc312f899904dc68
Linux Linux 5.14

References