{"id":"CVE-2022-48979","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix array index out of bound error in DCN32 DML\n\n[Why&How]\nLinkCapacitySupport array is indexed with the number of voltage states and\nnot the number of…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix array index out of bound error in DCN32 DML\n\n[Why&How]\nLinkCapacitySupport array is indexed with the number of voltage states and\nnot the number of…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-129"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel < 6.0.13","linux_kernel = 6.1"],"patched":["linux_kernel 6.0.13"],"published":"2024-10-21","updated":"2026-08-13","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-48979","references":[{"url":"https://git.kernel.org/stable/c/3d8a298b2e83b98042e6ec726e934f535b23e6aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/aeffc8fb2174f017a10df114bc312f899904dc68","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48979.json"},{"url":"https://access.redhat.com/security/cve/CVE-2022-48979"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2320739"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48979"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48979"},{"url":"https://lore.kernel.org/linux-cve-announce/2024102146-CVE-2022-48979-d40f@gregkh/T"}],"tags":["nvd","csaf","vex","red-hat","score-dispute"],"epss":0.00224,"epssPercentile":0.12889,"ingestedAt":"2026-08-13T00:57:21.993Z","scores":{"nvd":7.8,"vendor":4.4},"slug":"CVE-2022-48979","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix array index out of bound error in DCN32 DML\n\n[Why&How]\nLinkCapacitySupport array is indexed with the number of voltage states and\nnot the number of max DPPs. Fix the error by changing the array\ndeclaration to use the correct (larger) array size of total number of\nvoltage states.\n\n## Affected\n\n- `linux_kernel < 6.0.13`\n- `linux_kernel = 6.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.0.13`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48979.json)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}