CVE-2024-42121: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msg_id before read or write [WHAT] msg_id is used as an array index and it cannot be a negative value, and therefore cannot be equal to MOD_HDCP_MESSAGE_ID_INVALID (-1). [HOW] Check whether msg_id is valid before reading and setting. This fixes 4 OVERRUN issues reported by Coverity.

Affected products

• Linux Linux Kernel: from 4.15, before 5.10.222 (fixed in 5.10.222); from 5.11, before 5.15.163 (fixed in 5.15.163); from 5.16, before 6.1.98 (fixed in 6.1.98); from 6.2, before 6.6.39 (fixed in 6.6.39); from 6.7, before 6.9.9 (fixed in 6.9.9)

Published 2024-07-30. Last modified 2026-06-17.