Back
CVE-2024-46722drm/amdgpu: fix mc_data out-of-bounds read warning
- 7.1HighCVSS base score
- 0.25%Exploitation in 30 daysEPSS · top 83% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mc_data out-of-bounds read warning Clear warning that read mc_data[i-1] may out-of-bounds.
Timeline
ID reserved
By Linux
- 7 days later
· 7 days later
Published
- 20 months later
· 20 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.25% · top 83% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.
Affected products
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < 5fa4df25ecfc7b6c9006f5b871c46cfe25ea8826
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < 2097edede72ec5bb3869cf0205337d392fb2a553
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < 310b9d8363b88e818afec97ca7652bd7fe3d0650
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < 345bd3ad387f9e121aaad9c95957b80895e2f2ec
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < b862a0bc5356197ed159fed7b1c647e77bc9f653
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < d0a43bf367ed640e527e8ef3d53aac1e71f80114
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < 578ae965e8b90cd09edeb0252b50fa0503ea35c5
- affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 – < 51dfc0a4d609fe700750a62f41447f01b8c9ea50
- affected 4.2
- unaffected < 4.2
- unaffected 4.19.322 – ≤ 4.19.*
- unaffected 5.4.284 – ≤ 5.4.*
- unaffected 5.10.226 – ≤ 5.10.*
- unaffected 5.15.167 – ≤ 5.15.*
- unaffected 6.1.109 – ≤ 6.1.*
- unaffected 6.6.50 – ≤ 6.6.*
- unaffected 6.10.9 – ≤ 6.10.*
- unaffected 6.11 – ≤ *
References
References10
- https://git.kernel.org/stable/c/5fa4df25ecfc7b6c9006f5b871c46cfe25ea8826 (opens in a new tab)
- https://git.kernel.org/stable/c/2097edede72ec5bb3869cf0205337d392fb2a553 (opens in a new tab)
- https://git.kernel.org/stable/c/310b9d8363b88e818afec97ca7652bd7fe3d0650 (opens in a new tab)
- https://git.kernel.org/stable/c/345bd3ad387f9e121aaad9c95957b80895e2f2ec (opens in a new tab)
- https://git.kernel.org/stable/c/b862a0bc5356197ed159fed7b1c647e77bc9f653 (opens in a new tab)
- https://git.kernel.org/stable/c/d0a43bf367ed640e527e8ef3d53aac1e71f80114 (opens in a new tab)
- https://git.kernel.org/stable/c/578ae965e8b90cd09edeb0252b50fa0503ea35c5 (opens in a new tab)
- https://git.kernel.org/stable/c/51dfc0a4d609fe700750a62f41447f01b8c9ea50 (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-41983 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-46722)Record last updated .