You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2024 46729
About this tag
CVE-2024-46729 is a kernel-level memory-safety vulnerability in the AMD DRM display stack, specifically in drivers/gpu/drm/amd/display. It involves an incorrect array-size calculation that could lead to buffer overruns, with two overruns reported by static analysis. Microsoft has acknowledged that Azure Linux includes the affected open-source library and is potentially impacted, but this is a scoped product-level statement. The vulnerability details and references are recorded in public databases and distribution advisories. Discussions on WindowsForum cover the scope of the CVE, Microsoft's attestation, and guidance for patching Azure Linux systems.
Microsoft’s one‑line attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it’s a scoped, product‑level inventory statement, not proof that no other Microsoft product can include the same vulnerable Linux kernel code. rview...