CVE-2024-26797: 
Linux Debian vulnerability analysis and mitigation

A buffer overflow vulnerability was discovered in the Linux kernel's AMD display driver, specifically in the map_hw_resources function. The vulnerability (CVE-2024-26797) was identified when the function was found to be accessing arrays using an index that could potentially exceed the array size. This issue affects the AMD display driver in the Linux kernel, particularly the DML2 (Display Mode Library 2) component (Kernel Git).

The vulnerability exists in the map_hw_resources function within the AMD display driver's DML2 component. The function was accessing arrays (dml2->v20.scratch.dml_to_dc_pipe_mapping.disp_cfg_to_stream_id and disp_cfg_to_plane_id) using an index that could potentially exceed the arrays' bounds. The issue was detected by the smatch static analyzer, which reported potential buffer overflows when the index value could be greater than the maximum allowed size. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (CISA ADP).

If exploited, this buffer overflow vulnerability could potentially lead to memory corruption, which might result in system crashes, information disclosure, or privilege escalation in the context of the Linux kernel. The high CVSS score indicates that successful exploitation could have significant impacts on the system's confidentiality, integrity, and availability (CISA ADP).

The vulnerability requires local access with low privilege level to exploit. The attack complexity is considered low, and no user interaction is required for exploitation. However, there are no public reports of this vulnerability being exploited in the wild (CISA ADP).

The vulnerability has been patched by adding a bounds check in the map_hw_resources function. The fix implements a check to ensure that the index is within the bounds of the arrays (DML2_WRAPPER_MAX_STREAMS_PLANES). If the index is out of bounds, an error message is printed, and the execution continues by breaking the loop early, preventing the buffer overflow (Kernel Git).