CVE-2024-26914

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the drm/amd/display component of the Linux kernel, where the mpc combine array size was incorrectly set to MAX SURFACES instead of MAX PLANES. This causes an array overflow when there are more than 3 planes. The mpc combine array records all the planes per asic, and using MAX SURFACES as the array size leads to this overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.