In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check index msg_id before read or write

[WHAT]
msg_id is used as an array index and it cannot be a negative value, and
therefore cannot be equal to MOD_HDCP_MESSAGE_ID_INVALID (-1).

[HOW]
Check whether msg_id is valid before reading and setting.

This fixes 4 OVERRUN issues reported by Coverity.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00039.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux
  • Linux Kernel
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/59d99deb330af206a4541db0c4da8f73880fba03 cve-icon cve-icon
https://git.kernel.org/stable/c/9933eca6ada0cd612e19522e7a319bcef464c0eb cve-icon cve-icon
https://git.kernel.org/stable/c/a31ea49dc8064a557565725cf045944307476a6e cve-icon cve-icon
https://git.kernel.org/stable/c/ae91ffbc8b8d942e3e7f188728cad557b7ed5ee4 cve-icon cve-icon
https://git.kernel.org/stable/c/b5b8837d066cc182ff69fb5629ad32ade5484567 cve-icon cve-icon
https://git.kernel.org/stable/c/fbb0701af9734cff13917a4b98b5ee9da2fde48d cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024073024-CVE-2024-42121-2b28@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-42121 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-42121 cve-icon
History

Mon, 29 Sep 2025 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-129
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Tue, 05 Nov 2024 10:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-09-08T15:21:45.179Z

Reserved: 2024-07-29T15:50:41.179Z

Link: CVE-2024-42121

cve-icon Vulnrichment

Updated: 2024-08-02T04:54:32.543Z

cve-icon NVD

Status : Analyzed

Published: 2024-07-30T08:15:04.353

Modified: 2025-09-29T14:36:26.697

Link: CVE-2024-42121

cve-icon Redhat

Severity : Low

Publid Date: 2024-07-30T00:00:00Z

Links: CVE-2024-42121 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-07-12T22:23:46Z