What happened
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure array index tg_inst won't be -1 [WHY & HOW] tg_inst will be a negative if timing_generator_count equals 0, which should be checked before used. This fixes 2 OVERRUN issues reported by Coverity.
Affected versions
Linux: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c through before 15403445b873a4ce45b2d4ecfb5928a025297282 (git); 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c through before a64284b9e1999ad5580debced4bc6d6adb28aad4 (git); 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c through before 687fe329f18ab0ab0496b20ed2cb003d4879d931 (git); 4.15 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.