SB2024093065 - Improper error handling in Linux kernel dc bios driver

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper error handling (CVE-ID: CVE-2024-46809)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the get_ss_info_v3_1(), get_ss_info_from_internal_ss_info_tbl_V2_1(), get_ss_info_from_ss_info_table(), get_ss_entry_number_from_ss_info_tbl(), get_ss_entry_number_from_internal_ss_info_tbl_v2_1() and get_ss_entry_number_from_internal_ss_info_tbl_V3_1() functions in drivers/gpu/drm/amd/display/dc/bios/bios_parser.c. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/e50bec62acaeec03afc6fa5dfb2426e52d049cf5
• https://git.kernel.org/stable/c/e46b70a7cfed71cb84e985c785c39c16df5c28cb
• https://git.kernel.org/stable/c/8b0ddf19cca2a352b2a7e01d99d3ba949a99c84c
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.231
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.174
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.120
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.9
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.50