CVE-2024-42118
Severity CVSS v4.0:
Pending analysis
Type:
CWE-125
Out-of-bounds Read
Publication date:
30/07/2024
Last modified:
29/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amd/display: Do not return negative stream id for array<br />
<br />
[WHY]<br />
resource_stream_to_stream_idx returns an array index and it return -1<br />
when not found; however, -1 is not a valid array index number.<br />
<br />
[HOW]<br />
When this happens, call ASSERT(), and return a zero instead.<br />
<br />
This fixes an OVERRUN and an NEGATIVE_RETURNS issues reported by Coverity.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.15 (including) | 6.9.9 (excluding) |
To consult the complete list of CPE names with products and versions, see this page