PT-2024-32219 · Linux+5 · Linux Kernel+5

Published 2024-04-24 · Updated 2026-05-11 · CVE-2024-46816

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel, specifically in the drm/amd/display component. The issue arises when the link count exceeds the maximum allowed links, potentially leading to an OVERRUN warning. The link count could go up to AMDGPU DM MAX DISPLAY INDEX 31, but there are only max links elements within dc->links. To address this, the initialization of amdgpu dm is stopped when the link count is greater than max links.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

BDU:2025-05974

CVE-2024-46816

DLA-4178-1

DLA-4193-1

DSA-5907-1

ECHO-083D-E3A7-5BA2

OESA-2024-2216

OESA-2024-2218

OESA-2024-2219

OESA-2024-2220

OESA-2024-2256

OPENSUSE-SU-2024_3983-1

OPENSUSE-SU-2024_3984-1

OPENSUSE-SU-2024_3985-1

OPENSUSE-SU-2024_3986-1

OPENSUSE-SU-2024_4131-1

OPENSUSE-SU-2024_4140-1

SUSE-SU-2024:3983-1

SUSE-SU-2024:3984-1

SUSE-SU-2024:3985-1

SUSE-SU-2024:3986-1

SUSE-SU-2024:4081-1

SUSE-SU-2024:4082-1

SUSE-SU-2024:4100-1

SUSE-SU-2024:4103-1

SUSE-SU-2024:4131-1

SUSE-SU-2024:4140-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:0034-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7196-1

USN-7654-1

USN-7654-2

USN-7654-3

USN-7654-4

USN-7654-5

USN-7655-1

USN-7686-1

USN-7711-1

USN-7712-1

USN-7712-2

USN-8200-1

USN-8200-2

USN-8200-3

USN-8201-1

USN-8224-1

USN-8266-1

USN-8267-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 2494

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46816.json · Exploit
• https://ubuntu.com/security/CVE-2024-46815 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45008 · Security Note
• https://ubuntu.com/security/CVE-2024-46708 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43887 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45010 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43841 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-46816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45007 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41091 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37787 · Vendor Advisory