CVE-2024-46871— drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 12
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< e1896f381d27466c26cb44b4450eae05cd59dfd0 | affected |
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< 9f404b0bc2df3880758fb3c3bc7496f596f347d7 | affected | ||
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< 800a5ab673c4a61ca220cce177386723d91bdb37 | affected | ||
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< c592b6355b9b57b8e59fc5978ce1e14f64488a98 | affected | ||
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< ad28d7c3d989fc5689581664653879d664da76f0 | affected | ||
4.15 | affected | ||
< 4.15 | unaffected | ||
5.15.174≤ 5.15.* | unaffected | ||
| … +4 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-46871
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Why & How] It actually exposes '6' types in enum dmub_notification_type. Not 5. Using smaller number to create array dmub_callback & dmub_thread_offload has potential to access item out of array bound. Fix it.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在定义AMDGPU_DMUB_NOTIFICATION_MAX值时不准确，可能导致数组越界访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-46871
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-46871
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-46871 (5)
Same Patch Batch · Linux · 2024-10-09 · 17 CVEs total
| CVE-2024-46870 | drm/amd/display: Disable DMCUB timeout for DCN35 | |
| CVE-2024-47658 | crypto: stm32/cryp - call finalize with bh disabled | |
| CVE-2024-47659 | smack: tcp: ipv4, fix incorrect labeling | |
| CVE-2024-47660 | fsnotify: clear PARENT_WATCHED flags lazily | |
| CVE-2024-47662 | drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection | |
| CVE-2024-47661 | drm/amd/display: Avoid overflow from uint32_t to uint8_t | |
| CVE-2024-47663 | staging: iio: frequency: ad9834: Validate frequency parameter value | |
| CVE-2024-47664 | spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware | |
| CVE-2024-47665 | i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup | |
| CVE-2024-47666 | scsi: pm80xx: Set phy->enable_completion only when we wait for it | |
| CVE-2024-47667 | PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) | |
| CVE-2024-47668 | lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() | |
| CVE-2024-47669 | nilfs2: fix state management in error path of log writing function | |
| CVE-2024-47670 | ocfs2: add bounds checking to ocfs2_xattr_find_entry() | |
| CVE-2024-47671 | USB: usbtmc: prevent kernel-usb-infoleak | |
| CVE-2024-47673 | wifi: iwlwifi: mvm: pause TCM when the firmware is stopped |
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-53365
vsock/virtio: fix zerocopy completion for multi-skb sends - CVE-2026-53364
Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate - CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc().
Same vendor: Linux
- CVE-2026-53365
vsock/virtio: fix zerocopy completion for multi-skb sends - CVE-2026-53364
Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate - CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc().
V. Comments for CVE-2024-46871
No comments yet