First published: Wed May 01 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' The 'stream' pointer is used in dcn10_set_output_transfer_func() before the check if 'stream' is NULL. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn10/dcn10_hwseq.c:1892 dcn10_set_output_transfer_func() warn: variable dereferenced before check 'stream' (see line 1875)
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux kernel | >=5.4<5.4.273 | |
Linux kernel | >=5.5<5.10.214 | |
Linux kernel | >=5.11<5.15.153 | |
Linux kernel | >=5.16<6.1.83 | |
Linux kernel | >=6.2<6.6.23 | |
Linux kernel | >=6.7<6.7.11 | |
Linux kernel | >=6.8<6.8.2 | |
Debian | =10.0 | |
debian/linux | 5.10.223-1 5.10.234-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.17-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-27044 has a medium severity rating due to the potential for NULL pointer dereferences in the Linux kernel.
To fix CVE-2024-27044, update to the patched versions of the Linux kernel that eliminate the NULL pointer dereference issue.
CVE-2024-27044 affects Linux kernel versions from 5.4 up to 6.8.2, depending on specific release numbers.
CVE-2024-27044 can affect multiple Linux distributions using the impacted kernel versions, including Debian.
CVE-2024-27044 potentially impacts the display management functionality in the kernel, particularly related to setting output transfer functions.