---
id: CVE-2022-48979
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amd/display: fix array index out of bound error in DCN32 DML

  [Why&How]
  LinkCapacitySupport array is indexed with the number of voltage states and
  not the number of…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amd/display: fix array index out of bound error in DCN32 DML

  [Why&How]
  LinkCapacitySupport array is indexed with the number of voltage states and
  not the number of…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-129
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 6.0.13
  - linux_kernel = 6.1
patched:
  - linux_kernel 6.0.13
published: '2024-10-21'
updated: '2026-08-13'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-48979'
references:
  - url: 'https://git.kernel.org/stable/c/3d8a298b2e83b98042e6ec726e934f535b23e6aa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aeffc8fb2174f017a10df114bc312f899904dc68'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48979.json
  - url: 'https://access.redhat.com/security/cve/CVE-2022-48979'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2320739'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2022-48979'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2022-48979'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024102146-CVE-2022-48979-d40f@gregkh/T
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - score-dispute
epss: 0.00224
epssPercentile: 0.12889
ingestedAt: '2026-08-13T00:57:21.993Z'
scores:
  nvd: 7.8
  vendor: 4.4
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix array index out of bound error in DCN32 DML

[Why&How]
LinkCapacitySupport array is indexed with the number of voltage states and
not the number of max DPPs. Fix the error by changing the array
declaration to use the correct (larger) array size of total number of
voltage states.

## Affected

- `linux_kernel < 6.0.13`
- `linux_kernel = 6.1`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.0.13`

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48979.json)