From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B899A17B4E5 for ; Wed, 18 Sep 2024 07:18:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1726643931; cv=none; b=LoWfaKIF4fNEnmoAZVb53TZW9h73gtUkTxw31nXIRXSH+so6G+lTQ5u6bLmf09AEwZLiAhE37HgpQmZGWSsHs7rMH0D0kI+R64gIPaJSwMBaedMdMpPrgNPyeCxya1T+RHea9WpOKUQA+MujAlStJztPH4uQsC45VE+XHB+4Z/c= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1726643931; c=relaxed/simple; bh=cT0vn5iFLcTxJndHN9sc1zKTIvuFwtH/ORzA0Eypzug=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=j5Me9kn17+QaPaUxQIUDMwnZaPt6AhrnPiQv+iSlaZ9A1EhN7rEKUccjzqXOoRN0Jt3RTft5MaT+Vn4XVPIrALh1E4ncGys/a78DP4bRk+va/64UGasy+hu/C8ZrXlYZjqSbyCuayCZSxHWvbku1/iPddeKvh/NpAc9HdcBIwyI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=f35yGCZy; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="f35yGCZy" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 291D6C4CEC3; Wed, 18 Sep 2024 07:18:50 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1726643931; bh=cT0vn5iFLcTxJndHN9sc1zKTIvuFwtH/ORzA0Eypzug=; h=From:To:Cc:Subject:Date:Reply-to:From; b=f35yGCZyHNs33OO8eOQ27H5iDS9sPqUT5vMgh0cuJouPxsLuVecScJ5aSJvRdkMWL QO50Mk1P5unCmundyYDTUV3iowxtGmcgCckZQNEhnZ9TUs1GsoVeXhNPhbk+StEoxp jwkZ4Qu9Gh7dI1WSTDG/gOFd5vFryS71zxjvS5ok= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2024-46775: drm/amd/display: Validate function returns Date: Wed, 18 Sep 2024 09:17:10 +0200 Message-ID: <2024091847-CVE-2024-46775-aecc@gregkh> X-Mailer: git-send-email 2.46.0 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=1841; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=cT0vn5iFLcTxJndHN9sc1zKTIvuFwtH/ORzA0Eypzug=; b=owGbwMvMwCRo6H6F97bub03G02pJDGmv6uK/5Xy7K5ovfU6yMeqEjfGik/Pez9Y5zXJYz+rOi 523rW997ohlYRBkYpAVU2T5so3n6P6KQ4pehranYeawMoEMYeDiFICJ7O1lmJ+9u1FQyNN8S7+6 SrPfpxd+AeXnHBnmqc05cTJo7zrJadNs3p7nnjV5o4PdTQA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate function returns [WHAT & HOW] Function return values must be checked before data can be used in subsequent functions. This fixes 4 CHECKED_RETURN issues reported by Coverity. The Linux kernel CVE team has assigned CVE-2024-46775 to this issue. Affected and fixed versions =========================== Fixed in 6.10.10 with commit 5639a3048c70 Fixed in 6.11 with commit 673f816b9e1e Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2024-46775 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c drivers/gpu/drm/amd/display/dc/hubbub/dcn20/dcn20_hubbub.c drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_training.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/5639a3048c7079803256374204ad55ec52cd0b49 https://git.kernel.org/stable/c/673f816b9e1e92d1f70e1bf5f21b531e0ff9ad6c