PT-2024-29755 · Linux+4 · Linux Kernel+4

Published

2024-04-22

·

Updated

2026-05-26

·

CVE-2024-42118

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the drm/amd/display component in the Linux kernel, where the function resource stream to stream idx returns an array index. If the index is not found, it returns -1, which is not a valid array index number. This can lead to an OVERRUN and NEGATIVE RETURNS issue, as reported by Coverity. When this happens, the kernel calls ASSERT() and returns a zero instead.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
AZL-62604
AZL-67890
BDU:2026-03293
CVE-2024-42118
ECHO-C6AC-C40D-C61D
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Ubuntu