CVE-2024-26913: 
CBL Mariner vulnerability analysis and mitigation

CVE-2024-26913 affects the Linux kernel's AMD display driver (drm/amd/display). The vulnerability is related to a missing ODM (Output Data Mapping) calculation in the pipe split policy determination, which can cause Underflow/Corruption issues specifically when handling 8K resolution at 30Hz on DCN35 displays. The issue was discovered and reported in early 2024, with patches being released to address the vulnerability (Kernel Patch).

The vulnerability stems from an implementation flaw in the AMD display driver's DCN35 (Display Core Next 3.5) handling of high-resolution displays. The core issue involves missing ODM calculations in the pipe split policy determination process. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH), with a vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements but potentially severe impacts (NVD).

When exploited, this vulnerability can lead to display underflow and corruption issues, particularly affecting systems running 8K resolution at 30Hz on DCN35 displays. The high CVSS score indicates potential impacts on system confidentiality, integrity, and availability when exploited (NVD).

The vulnerability requires local access with low complexity and privileged access to exploit. There are no known reports of this vulnerability being exploited in the wild (NVD).

A fix has been implemented by adding the ODM calculation to the pipe split policy determination process. The patch has been merged into the Linux kernel, addressing the vulnerability through proper calculation implementation. Users should update their Linux kernel to a version that includes this fix (Kernel Patch).