CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add NULL test for 'timing generator' in 'dcn21setpipe()'
In "u32 otginst = pipectx->streamres.tg->inst;" pipectx->streamres.tg could be NULL, it is relying on the caller to ensure the tg is not NULL.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add NULL test for 'timing generator' in 'dcn21setpipe()'
The Linux kernel CVE team has assigned CVE-2024-26661 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040223-CVE-2024-26661-bef6@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26661?
CVE-2024-26661 is classified as a high-severity vulnerability due to potential system impact.
How do I fix CVE-2024-26661?
To fix CVE-2024-26661, update your Linux kernel to version 6.6.17, 6.7.5, 6.8, or specific versions provided by Debian.
What software packages are affected by CVE-2024-26661?
CVE-2024-26661 affects the Linux kernel in Red Hat versions prior to 6.6.17, 6.7.5, 6.8, and certain Debian versions.
What systems are vulnerable to CVE-2024-26661?
Any system running the affected versions of the Linux kernel is vulnerable to CVE-2024-26661.
Is CVE-2024-26661 related to the AMD display driver?
Yes, CVE-2024-26661 is specifically related to a vulnerability in the AMD display driver within the Linux kernel.