CVE-2024-46821

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46821
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clk_idex as an index into an array pptable->DpmDescriptor. V2: fix clk_index return check (Tim Huang)

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06a3810010b525b9958424e344f0c25b09e128fa Patch
https://git.kernel.org/stable/c/4711b1347cb9f0c3083da6d87c624d75f9bd1d50 Patch
https://git.kernel.org/stable/c/60f4a4bc3329e5cb8c4df0cc961f0d5ffd96e22d Patch
https://git.kernel.org/stable/c/befd1dc693c98bad69a701ede3a298698f0f9436 Patch
https://git.kernel.org/stable/c/c8c19ebf7c0b202a6a2d37a52ca112432723db5f Patch
https://git.kernel.org/stable/c/e549cd6da1f21c34ba0f65adeca6a8aa9860b381 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

05 May 2026, 15:28

Type Values Removed Values Added
First Time Debian debian Linux
Debian
References () https://git.kernel.org/stable/c/befd1dc693c98bad69a701ede3a298698f0f9436 - () https://git.kernel.org/stable/c/befd1dc693c98bad69a701ede3a298698f0f9436 - Patch
References () https://git.kernel.org/stable/c/e549cd6da1f21c34ba0f65adeca6a8aa9860b381 - () https://git.kernel.org/stable/c/e549cd6da1f21c34ba0f65adeca6a8aa9860b381 - Patch
References () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html - () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html - Mailing List, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html - () https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html - Mailing List, Third Party Advisory
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

03 Nov 2025, 23:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

03 Nov 2025, 20:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html -

10 Apr 2025, 13:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/befd1dc693c98bad69a701ede3a298698f0f9436 -
  • () https://git.kernel.org/stable/c/e549cd6da1f21c34ba0f65adeca6a8aa9860b381 -

04 Oct 2024, 17:06

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/06a3810010b525b9958424e344f0c25b09e128fa - () https://git.kernel.org/stable/c/06a3810010b525b9958424e344f0c25b09e128fa - Patch
References () https://git.kernel.org/stable/c/4711b1347cb9f0c3083da6d87c624d75f9bd1d50 - () https://git.kernel.org/stable/c/4711b1347cb9f0c3083da6d87c624d75f9bd1d50 - Patch
References () https://git.kernel.org/stable/c/60f4a4bc3329e5cb8c4df0cc961f0d5ffd96e22d - () https://git.kernel.org/stable/c/60f4a4bc3329e5cb8c4df0cc961f0d5ffd96e22d - Patch
References () https://git.kernel.org/stable/c/c8c19ebf7c0b202a6a2d37a52ca112432723db5f - () https://git.kernel.org/stable/c/c8c19ebf7c0b202a6a2d37a52ca112432723db5f - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-129

30 Sep 2024, 12:45

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/pm: Corregir lectura de índice de matriz negativa Evitar el uso de valores negativos para clk_idex como índice en una matriz pptable->DpmDescriptor. V2: Corregir comprobación de retorno de clk_index (Tim Huang)

27 Sep 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-27 13:15

Updated : 2026-05-05 15:28

NVD link : CVE-2024-46821

Mitre link : CVE-2024-46821

CVE.ORG link : CVE-2024-46821

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index