PT-2024-7191 · Linux+7 · Linux Kernel+7
Published
2024-04-30
·
Updated
2026-05-05
·
CVE-2024-46821
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.8
Description
The issue is related to a negative array index read in the Linux kernel, specifically in the drm/amd/pm module. The problem arises from using negative values for
clk idex as an index into an array pptable->DpmDescriptor. This could potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.Recommendations
To resolve the issue, upgrade the Linux kernel to a version newer than 6.10.8. As a temporary workaround, consider restricting access to the vulnerable module
drm/amd/pm to minimize the risk of exploitation. Avoid using negative values for clk idex as an index into an array pptable->DpmDescriptor until the issue is resolved.Exploit
Fix
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu