CVE-2024-26914

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix incorrect mpc_combine array size

[why] MAX_SURFACES is per stream, while MAX_PLANES is per asic. The mpc_combine is an array that records all the planes per asic. Therefore MAX_PLANES should be used as the array size. Using MAX_SURFACES causes array overflow when there are more than 3 planes.

[how] Use the MAX_PLANES for the mpc_combine array size.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

VendorProductVersions
LinuxLinux>= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 0bd8ef618a42d7e6ea3f701065264e15678025e3; >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 39079fe8e660851abbafa90cd55cbf029210661f
LinuxLinux4.15

References

Timeline

Published
Apr 17, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-269155.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reset IH OVERFLOW_CLEAR bit Allows us to detect subsequentCVE-2024-269165.5In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: flush any delayed gfxoff on suspend entry" commit ab4CVE-2024-269175.5In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" TCVE-2024-269185.5In the Linux kernel, the following vulnerability has been resolved: PCI: Fix active state requirement in PME polling The commit noted in fCVE-2024-269195.5In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs rootCVE-2024-26929.0SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server SidCVE-2024-269205.5In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix rCVE-2024-269215.5In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out(CVE-2024-269225.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more clearCVE-2024-269234.7In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collecCVE-2024-269247.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element Pablo reports a crCVE-2024-269255.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort pat
CVE-2024-26914: High severity, CVSS 7.8 | Vulnix