PT-2024-32152 · Linux+5 · Linux Kernel+5

Published

2024-04-19

·

Updated

2026-05-26

·

CVE-2024-46729

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to an incorrect size calculation for a loop in the drm/amd/display component of the Linux kernel. Specifically, fe clk en has a size of 5, but sizeof(fe clk en) returns a byte size of 20, which is larger than the array size. This discrepancy leads to 2 OVERRUN issues reported by Coverity. The fix involves dividing the byte size by the element size.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-131CWE-787CWE-130

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
BDU:2026-03292
CVE-2024-46729
ECHO-C16E-6BD1-E664
OPENSUSE-SU-2024_3551-1
OPENSUSE-SU-2024_3561-1
OPENSUSE-SU-2024_3564-1
SUSE-SU-2024:3551-1
SUSE-SU-2024:3553-1
SUSE-SU-2024:3561-1
SUSE-SU-2024:3564-1
SUSE-SU-2025:20073-1
SUSE-SU-2025:20077-1
USN-7154-1
USN-7154-2
USN-7155-1
USN-7156-1
USN-7196-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu