
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2024-46775 affects the Linux kernel's AMD display driver (drm/amd/display). The vulnerability was discovered in September 2024 and involves function return values not being properly validated before their data is used in subsequent functions. This issue specifically affects the AMD display driver component in the Linux kernel (Kernel Git).
The vulnerability stems from missing validation checks for function return values in the AMD display driver. The issue was identified through Coverity scan which reported 4 CHECKEDRETURN issues. The affected code paths are in multiple files including dcdmubsrv.c, dcn20hubbub.c, and linkdptraining.c. The vulnerability has been assigned a CVSS 3 Severity Score of 5.5 (Medium) (Ubuntu Security).
The failure to validate function returns could potentially lead to the use of invalid data in subsequent functions, which may result in system instability or denial of service conditions in systems using the AMD display driver (Ubuntu Security).
The issue has been fixed in Linux kernel version 6.8.0 and backported to various distribution kernels. Ubuntu has released patches for multiple kernel versions including 24.04 LTS (noble), 22.04 LTS (jammy), and others. Users are advised to update their systems to the patched versions (Ubuntu Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."