CVE-2024-46813

What it actually does

Missing bounds check on link_index allows out-of-bounds read/write against the fixed-size dc->links[] array, causing memory overruns and resource leaks in the AMD display driver.

Why it matters to the business

Local attackers can crash systems or escalate privileges on Linux machines using AMD GPUs, leading to downtime and potential full host compromise in multi-tenant or shared environments.

How an attack unfolds

An attacker with local access supplies a crafted link_index value that exceeds MAX_LINKS; the driver accesses dc->links[] without validation, triggering the reported overrun and leak conditions that an exploit can turn into arbitrary memory operations.

How to fix it

Apply the upstream fix commit 032c5407a608ac3b2a98bf4fbda27d12c20c5887 or later; rebuild and deploy the patched kernel. Reboot affected systems after installation.

How to confirm the fix worked

Confirm the presence of the bounds check on link_index in the drm/amd/display code and verify that dc->links[] accesses are guarded; run static analysis tools such as Coverity on the updated driver to ensure the four reported issues are resolved.

Typical attack path

1. Obtain local user or container access on a Linux host with AMD display hardware
2. Trigger the display driver path that performs an unchecked link_index lookup
3. Supply an out-of-bounds index to cause array overrun or resource leak
4. Leverage the resulting memory corruption for privilege escalation or denial of service

How to detect it

Review kernel logs and crash dumps for AMD display driver oops or warnings referencing link_index or dc->links array accesses; correlate with local user activity around the time of any stability issues.

What your security team should do

• Prioritize patching of all Linux kernels containing the vulnerable AMD display driver within the next maintenance window
• Restrict local access to systems with AMD GPUs until patches are applied
• Monitor kernel update channels for backported fixes in distribution kernels