GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-56784 (GCVE-0-2024-56784)

Vulnerability from cvelistv5 – Published: 2025-01-08 17:52 – Updated: 2026-08-05 11:46
VLAI
Title
drm/amd/display: Adding array index check to prevent memory corruption
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to prevent memory corruption [Why & How] Array indices out of bound caused memory corruption. Adding checks to ensure that array index stays in bound.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-10-01 19:56 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0057b36ac2be0f573048acda52e641e0502a9ff3 , < dff526dc3e27f5484f5ba11471b9fbbe681467f2 (git)
Affected: 0057b36ac2be0f573048acda52e641e0502a9ff3 , < 2c437d9a0b496168e1a1defd17b531f0a526dbe9 (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.11
Unaffected: 0 , < 6.11 (semver)
Unaffected: 6.12.5 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-56784",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T19:56:12.168384Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T19:57:23.425Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "dff526dc3e27f5484f5ba11471b9fbbe681467f2",
              "status": "affected",
              "version": "0057b36ac2be0f573048acda52e641e0502a9ff3",
              "versionType": "git"
            },
            {
              "lessThan": "2c437d9a0b496168e1a1defd17b531f0a526dbe9",
              "status": "affected",
              "version": "0057b36ac2be0f573048acda52e641e0502a9ff3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.11"
            },
            {
              "lessThan": "6.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.5",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Adding array index check to prevent memory corruption\n\n[Why \u0026 How]\nArray indices out of bound caused memory corruption. Adding checks to\nensure that array index stays in bound."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The overflow is driven by a DRM atomic modeset/writeback commit on /dev/dri/card0, which requires local access to the GPU device node; there is no network or remote data path into the clk_mgr bandwidth notifier.\nAC:L - On affected DCN 3.5.1 hardware the out-of-bounds index is deterministic \u2014 the writeback connector\u0027s virtual link always sits four indices above the lowest DPIA link, yielding hr_index==2 on every commit \u2014 with no race, timing window, or memory-layout condition outside the attacker\u0027s control.\nPR:L - An unprivileged local user in a graphical session (holding DRM master via logind, or any user with access to the card node in a container/kiosk) can issue the atomic commit that reaches dcn35_notify_host_router_bw; no root or CAP_SYS_ADMIN is needed.\nUI:N - The attacker performs the DRM_IOCTL_MODE_ATOMIC call itself; no victim action such as plugging in a monitor or dock is required, since the offending virtual/writeback link is created unconditionally at driver init.\nS:U - The corruption is confined to the kernel\u0027s own stack within the amdgpu display driver; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The out-of-bounds access is a read-modify-write that reads adjacent stack contents beyond the 2-element array, and clobbering saved pointers/registers in the frame is leverageable into a kernel memory disclosure primitive.\nI:H - This is an out-of-bounds stack write whose value (pixel-clock-derived bandwidth in kbps) is attacker-influenced through the committed display mode, allowing an arbitrary 32-bit addend to be applied to adjacent stack slots including saved registers and return-address region \u2014 a control-flow hijack primitive.\nA:H - Corrupting stack memory past host_router_bw_kbps[] reliably produces stack-protector panics, oopses, or hangs on every affected display commit, and the attacker can repeat it at will."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:46:28.847Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/dff526dc3e27f5484f5ba11471b9fbbe681467f2"
        },
        {
          "url": "https://git.kernel.org/stable/c/2c437d9a0b496168e1a1defd17b531f0a526dbe9"
        }
      ],
      "title": "drm/amd/display: Adding array index check to prevent memory corruption",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-56784",
    "datePublished": "2025-01-08T17:52:00.503Z",
    "dateReserved": "2024-12-29T11:26:39.769Z",
    "dateUpdated": "2026-08-05T11:46:28.847Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-56784",
      "date": "2026-09-16",
      "epss": "0.00202",
      "percentile": "0.10305"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.12.5\", \"matchCriteriaId\": \"75E05E0A-C898-433A-8E50-6D9EC8646A64\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amd/display: Adding array index check to prevent memory corruption\\n\\n[Why \u0026 How]\\nArray indices out of bound caused memory corruption. Adding checks to\\nensure that array index stays in bound.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Se agreg\\u00f3 una verificaci\\u00f3n del \\u00edndice de la matriz para evitar la corrupci\\u00f3n de la memoria [Por qu\\u00e9 y c\\u00f3mo] Los \\u00edndices de la matriz fuera de los l\\u00edmites causaron corrupci\\u00f3n de la memoria. Se agregaron verificaciones para garantizar que el \\u00edndice de la matriz permanezca dentro de los l\\u00edmites.\"}]",
      "id": "CVE-2024-56784",
      "lastModified": "2025-01-09T21:25:55.693",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
      "published": "2025-01-08T18:15:19.357",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/2c437d9a0b496168e1a1defd17b531f0a526dbe9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/dff526dc3e27f5484f5ba11471b9fbbe681467f2\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T02:02:41.000Z",
      "cve": "CVE-2024-56784",
      "id": "msrc_CVE-2024-56784",
      "initial_release_date": "2025-01-02T00:00:00.000Z",
      "product_status:known_not_affected": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "drm/amd/display: Adding array index check to prevent memory corruption",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2024-56784.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-56784\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-01-08T18:15:19.357\",\"lastModified\":\"2026-06-17T08:12:59.213\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amd/display: Adding array index check to prevent memory corruption\\n\\n[Why \u0026 How]\\nArray indices out of bound caused memory corruption. Adding checks to\\nensure that array index stays in bound.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Se agreg\u00f3 una verificaci\u00f3n del \u00edndice de la matriz para evitar la corrupci\u00f3n de la memoria [Por qu\u00e9 y c\u00f3mo] Los \u00edndices de la matriz fuera de los l\u00edmites causaron corrupci\u00f3n de la memoria. Se agregaron verificaciones para garantizar que el \u00edndice de la matriz permanezca dentro de los l\u00edmites.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0057b36ac2be0f573048acda52e641e0502a9ff3\",\"lessThan\":\"dff526dc3e27f5484f5ba11471b9fbbe681467f2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0057b36ac2be0f573048acda52e641e0502a9ff3\",\"lessThan\":\"2c437d9a0b496168e1a1defd17b531f0a526dbe9\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.11\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.11\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.5\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-10-01T19:56:12.168384Z\",\"id\":\"CVE-2024-56784\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.12.5\",\"matchCriteriaId\":\"75E05E0A-C898-433A-8E50-6D9EC8646A64\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2c437d9a0b496168e1a1defd17b531f0a526dbe9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dff526dc3e27f5484f5ba11471b9fbbe681467f2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-09-12T12:14:53+00:00",
      "cve": "CVE-2024-56784",
      "id": "CVE-2024-56784",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/amd/display: Adding array index check to prevent memory corruption",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56784.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-02T01:23:12Z",
      "cve": "CVE-2024-56784",
      "id": "CVE-2024-56784",
      "initial_release_date": "2025-01-09T00:20:25Z",
      "product_status:known_not_affected": "478",
      "product_status:recommended": "125",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-56784",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-56784.json",
      "version": "26"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-56784\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-10-01T19:56:12.168384Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-10-01T15:51:45.538Z\"}}], \"cna\": {\"title\": \"drm/amd/display: Adding array index check to prevent memory corruption\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - The overflow is driven by a DRM atomic modeset/writeback commit on /dev/dri/card0, which requires local access to the GPU device node; there is no network or remote data path into the clk_mgr bandwidth notifier.\\nAC:L - On affected DCN 3.5.1 hardware the out-of-bounds index is deterministic \\u2014 the writeback connector\u0027s virtual link always sits four indices above the lowest DPIA link, yielding hr_index==2 on every commit \\u2014 with no race, timing window, or memory-layout condition outside the attacker\u0027s control.\\nPR:L - An unprivileged local user in a graphical session (holding DRM master via logind, or any user with access to the card node in a container/kiosk) can issue the atomic commit that reaches dcn35_notify_host_router_bw; no root or CAP_SYS_ADMIN is needed.\\nUI:N - The attacker performs the DRM_IOCTL_MODE_ATOMIC call itself; no victim action such as plugging in a monitor or dock is required, since the offending virtual/writeback link is created unconditionally at driver init.\\nS:U - The corruption is confined to the kernel\u0027s own stack within the amdgpu display driver; no VM, IOMMU, or sandbox boundary is crossed.\\nC:H - The out-of-bounds access is a read-modify-write that reads adjacent stack contents beyond the 2-element array, and clobbering saved pointers/registers in the frame is leverageable into a kernel memory disclosure primitive.\\nI:H - This is an out-of-bounds stack write whose value (pixel-clock-derived bandwidth in kbps) is attacker-influenced through the committed display mode, allowing an arbitrary 32-bit addend to be applied to adjacent stack slots including saved registers and return-address region \\u2014 a control-flow hijack primitive.\\nA:H - Corrupting stack memory past host_router_bw_kbps[] reliably produces stack-protector panics, oopses, or hangs on every affected display commit, and the attacker can repeat it at will.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"0057b36ac2be0f573048acda52e641e0502a9ff3\", \"lessThan\": \"dff526dc3e27f5484f5ba11471b9fbbe681467f2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0057b36ac2be0f573048acda52e641e0502a9ff3\", \"lessThan\": \"2c437d9a0b496168e1a1defd17b531f0a526dbe9\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.11\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.11\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.12.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.12.*\"}, {\"status\": \"unaffected\", \"version\": \"6.13\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/dff526dc3e27f5484f5ba11471b9fbbe681467f2\"}, {\"url\": \"https://git.kernel.org/stable/c/2c437d9a0b496168e1a1defd17b531f0a526dbe9\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amd/display: Adding array index check to prevent memory corruption\\n\\n[Why \u0026 How]\\nArray indices out of bound caused memory corruption. Adding checks to\\nensure that array index stays in bound.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12.5\", \"versionStartIncluding\": \"6.11\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.13\", \"versionStartIncluding\": \"6.11\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T11:46:28.847Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-56784\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T11:46:28.847Z\", \"dateReserved\": \"2024-12-29T11:26:39.769Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-01-08T17:52:00.503Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.