CVE-2024-38548: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference

Published Jun 19, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference

In cdnsmhdpatomicenable(), the return value of drmmodeduplicate() is assigned to mhdpstate->currentmode, and there is a dereference of it in drmmodesetname(), which will lead to a NULL pointer dereference on failure of drmmodeduplicate().

Fix this bug add a check of mhdpstate->currentmode.

Affected Software

10 affected componentsFixes available

Linux Linux kernel>=5.10<5.10.219

Linux Linux kernel>=5.11<5.15.161

Linux Linux kernel>=5.16<6.1.93

Linux Linux kernel>=6.2<6.6.33

Linux Linux kernel>=6.7<6.8.12

Linux Linux kernel>=6.9<6.9.3

debian/linux<6.1.94-1

6.1.94-1

debian/linux<6.8.12-1

6.8.12-1

debian/linux<6.8.12-1

6.8.12-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.94-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.8.12-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Compensating control
In cdns_mhdp_atomic_enable(), check mhdp_state->current_mode after assigning the result of drm_mode_duplicate() and handle a NULL result before calling drm_mode_set_name(), preventing a NULL pointer dereference.

Event History

Jun 19, 2024

CVE Published

via MITRE·01:35 PM

Data Sourced

via MITRE·01:35 PM

Description

Data Sourced

via OSV·02:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-5730

Frequently Asked Questions

What is the severity of CVE-2024-38548?

CVE-2024-38548 has been classified as a moderate severity vulnerability in the Linux kernel.

How do I fix CVE-2024-38548?

To fix CVE-2024-38548, update to one of the following patched kernel versions: 5.10.223-1, 5.10.234-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.17-1.

Which Linux kernel version is vulnerable to CVE-2024-38548?

CVE-2024-38548 affects specific versions of the Linux kernel prior to the patched releases listed in the remediation.

What does CVE-2024-38548 affect in the Linux kernel?

CVE-2024-38548 affects the Direct Rendering Manager (DRM) subsystem related to the cdns-mhdp8546 driver.

Is CVE-2024-38548 a potential security risk?

Yes, CVE-2024-38548 could lead to a null pointer dereference, which may affect the stability and security of affected systems.