CVE-2024-46778: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-46778 is a vulnerability discovered in the Linux kernel's AMD display driver component. The issue was identified in the drm/amd/display module, specifically related to the UnboundedRequestEnabled pointer value checking. The vulnerability was disclosed in September 2024 and affects various Linux kernel versions (CVE Mitre).

The vulnerability stems from an incorrect pointer value check in the CalculateSwathAndDETConfiguration_params_st structure. The UnboundedRequestEnabled parameter is a pointer (dml_bool_t *UnboundedRequestEnabled), and the code was checking the address instead of the boolean value it points to. This was identified as a REVERSE_INULL issue by Coverity static analysis tool (Kernel Git). The CVSS 3 Severity Score is rated at 5.5 (Medium) (Ubuntu Security).

The vulnerability affects the AMD display driver component in the Linux kernel. While specific impact details are limited, the issue could potentially affect systems using AMD graphics hardware with the affected kernel versions.

The vulnerability has been patched in various Linux distributions. Ubuntu has fixed the issue in version 6.8.0-50.51 for 24.04 LTS (noble) and version 6.8.0-1020.22~22.04.1 for 22.04 LTS (jammy). The fix involves properly dereferencing the UnboundedRequestEnabled pointer to check its value rather than its address (Ubuntu Security).