PT-2024-11844 · Linux+2 · Linux Kernel+2

Aurabindo Pillai · Published 2022-11-25 · Updated 2026-04-20 · CVE-2022-48979

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns an array index out of bounds error in the DCN32 DML of the Linux kernel's drm/amd/display component. Specifically, the LinkCapacitySupport array is indexed with the number of voltage states instead of the maximum number of DPPs. The error is fixed by modifying the array declaration to use the correct, larger array size based on the total number of voltage states.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

AZL-51383

BDU:2025-04348

CVE-2022-48979

OPENSUSE-SU-2024_4315-1

OPENSUSE-SU-2024_4376-1

SUSE-SU-2024:4315-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4376-1

Affected Products

Debian

Linux Kernel

Suse

References · 972

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48979.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:4376-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48979 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48979 · Security Note
• https://git.kernel.org/stable/c/aeffc8fb2174f017a10df114bc312f899904dc68 · Patch
• https://bdu.fstec.ru/vul/2025-04348 · Security Note
• https://ubuntu.com/security/CVE-2022-48979 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48979 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-48979 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48979 · Security Note
• https://osv.dev/vulnerability/AZL-51383 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-48979 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4364-1 · Vendor Advisory
• https://git.kernel.org/stable/c/3d8a298b2e83b98042e6ec726e934f535b23e6aa · Patch
• https://osv.dev/vulnerability/CVE-2022-48979 · Vendor Advisory