---
id: CVE-2022-48979
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amd/display: fix array index out of bound error in DCN32 DML

  [Why&How]
  LinkCapacitySupport array is indexed with the number of voltage states and
  not the number of…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amd/display: fix array index out of bound error in DCN32 DML

  [Why&How]
  LinkCapacitySupport array is indexed with the number of voltage states and
  not the number of…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-129
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 6.0.13
  - linux_kernel = 6.1
patched:
  - linux_kernel 6.0.13
published: '2024-10-21'
updated: '2026-08-13'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-48979'
references:
  - url: 'https://git.kernel.org/stable/c/3d8a298b2e83b98042e6ec726e934f535b23e6aa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aeffc8fb2174f017a10df114bc312f899904dc68'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00215
epssPercentile: 0.12191
ingestedAt: '2026-08-13T00:57:21.993Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix array index out of bound error in DCN32 DML

[Why&How]
LinkCapacitySupport array is indexed with the number of voltage states and
not the number of max DPPs. Fix the error by changing the array
declaration to use the correct (larger) array size of total number of
voltage states.

## Affected

- `linux_kernel < 6.0.13`
- `linux_kernel = 6.1`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.0.13`