In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size

[Why & How]
During HDCP 2.x repeater authentication over HDMI, the driver reads the
sink's RxStatus register and extracts a 10-bit message size field (max
value 1023). This value is used as the read length for the ReceiverID
list without being clamped to the size of the destination buffer
rx_id_list[177]. A malicious HDMI repeater could advertise a message
size larger than the buffer, causing an out-of-bounds write during the
I2C read.

Clamp the read length in mod_hdcp_read_rx_id_list() to the size of the
rx_id_list buffer, matching the approach already used in the DP branch.

(cherry picked from commit 229212219e4247d9486f8ba41ef087358490be09)

https://git.kernel.org/stable/c/1906064d50d194a145486e5caf3db3e708b6f6ef

https://git.kernel.org/stable/c/3c4444aec06c74fbc05661f370954ac814963c38

https://git.kernel.org/stable/c/79e0273272a05fb26f9b1e55bf1a52eefc3b7b35

https://git.kernel.org/stable/c/91fb41218c413989d8b6c837748751454b452d68

https://git.kernel.org/stable/c/964e50ef7b8f09815a7d05b8326af700f8d5bc96

https://git.kernel.org/stable/c/98cfb7530ea91d8e5e928285cdce58e1131f6e83

https://git.kernel.org/stable/c/bfba882cfcd08f6540f72f48e786b6404f5d2c5b

https://git.kernel.org/stable/c/f0f3981c43b32cadfe373d636d9e9ca522bb3702

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"3c4444aec06c74fbc05661f370954ac814963c38","versionType":"git","status":"affected"},{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"91fb41218c413989d8b6c837748751454b452d68","versionType":"git","status":"affected"},{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"964e50ef7b8f09815a7d05b8326af700f8d5bc96","versionType":"git","status":"affected"},{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"79e0273272a05fb26f9b1e55bf1a52eefc3b7b35","versionType":"git","status":"affected"},{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"bfba882cfcd08f6540f72f48e786b6404f5d2c5b","versionType":"git","status":"affected"},{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"1906064d50d194a145486e5caf3db3e708b6f6ef","versionType":"git","status":"affected"},{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"98cfb7530ea91d8e5e928285cdce58e1131f6e83","versionType":"git","status":"affected"},{"version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","lessThan":"f0f3981c43b32cadfe373d636d9e9ca522bb3702","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.6","status":"affected"},{"version":"0","lessThan":"5.6","versionType":"semver","status":"unaffected"},{"version":"5.10.259","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.210","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.176","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.143","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.94","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.36","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.0.13","lessThanOrEqual":"7.0.*","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]