CVEvulnerability
CVE-2024-49905
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-10-21
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
This commit adds a null check for the 'afb' variable in the
amdgpu_dm_plane_handle_cursor_update function. Previously, 'afb' was
assumed to be null, but was used later in the code without a null check.
This could potentially lead to a null pointer dereference.
Changes since v1:
- Moved the null check for 'afb' to the line where 'afb' is used. (Alex)
Fixes the below:
drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_plane.c:1298 amdgpu_dm_plane_handle_cursor_update() error: we previously assumed 'afb' could be null (see line 1252)
Affected configurations
• linux linux kernel (< 6.1.113)
• linux linux kernel (>= 6.2 < 6.6.55)
• linux linux kernel (>= 6.7 < 6.10.14)
• linux linux kernel (>= 6.11 < 6.11.3)
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/75839e2365b666ff4e1b9047e442cab138eac4f6 Patch
- https://git.kernel.org/stable/c/9132882eaae4d21d2fc5843b3308379a481ebdf0 Patch
- https://git.kernel.org/stable/c/bd0e24e5e608ccb9fdda300bb974496d6d8cf57d Patch
- https://git.kernel.org/stable/c/cd9e9e0852d501f169aa3bb34e4b413d2eb48c37 Patch
- https://git.kernel.org/stable/c/e4e26cbe34d7c1c1db5fb7b3101573c29866439f Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html lists.debian.org