CVE-2024-36014: drm/arm/malidp: fix a possible null pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
drm/arm/malidp: fix a possible null pointer dereference
In malidpmwconnectorreset, new memory is allocated with kzalloc, but no check is performed. In order to prevent null pointer dereferencing, ensure that mwstate is checked before calling drmatomichelperconnectorreset.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.94-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.8.12-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36014?
CVE-2024-36014 has a severity rating that indicates a potential risk of null pointer dereference in the Linux kernel.
How do I fix CVE-2024-36014?
To remediate CVE-2024-36014, update to a fixed version of the Linux kernel such as 5.10.223-1 or higher.
Which versions of the Linux kernel are affected by CVE-2024-36014?
CVE-2024-36014 affects multiple Linux kernel versions including those between 4.19 and 6.9.
What component of the Linux kernel is impacted by CVE-2024-36014?
CVE-2024-36014 impacts the drm/arm/malidp component of the Linux kernel.
Is backporting a solution for CVE-2024-36014?
Backporting fixes for CVE-2024-36014 is not recommended since using the latest kernel version is the ideal solution.