Wind River Support Network

HomeDefectsLIN1023-7508
Fixed

LIN1023-7508 : Security Advisory - linux - CVE-2024-42121

Created: Jul 30, 2024    Updated: Sep 15, 2024
Resolved Date: Jul 30, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.13
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check index msg_id before read or write

WHAT]
msg_id is used as an array index and it cannot be a negative value, and
therefore cannot be equal to MOD_HDCP_MESSAGE_ID_INVALID (-1).

[HOW]
Check whether msg_id is valid before reading and setting.

This fixes 4 OVERRUN issues reported by Coverity.

CREATE(Triage):(User=admin) [CVE-2024-42121 (https://nvd.nist.gov/vuln/detail/CVE-2024-42121)

CVEs


Live chat
Online