CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2
In the Linux kernel, the following vulnerability has been resolved:
drm/mst: Fix NULL pointer dereference at drmdpaddpayloadpart2
[Why] Commit: - commit 5aa1dfcdf0a4 ("drm/mst: Refactor the flow for payload allocation/removement") accidently overwrite the commit - commit 54d217406afe ("drm: use mgr->dev in drmdbgkms in drmdpaddpayloadpart2") which cause regression.
[How] Recover the original NULL fix and remove the unnecessary input parameter 'state' for drmdpaddpayloadpart2().
(cherry picked from commit 4545614c1d8da603e57b60dd66224d81b6ffc305)
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39498?
CVE-2024-39498 has a medium severity due to the potential for a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2024-39498?
To fix CVE-2024-39498, update the kernel to versions 6.9.6, 6.10, or any of the specified patched versions in the affected software list.
Which Linux kernel versions are affected by CVE-2024-39498?
CVE-2024-39498 affects Linux kernel versions from 6.7 to 6.9.6, among others mentioned in the affected software list.
Is there a known exploit for CVE-2024-39498?
As of now, there is no publicly available exploit for CVE-2024-39498.
What systems are most impacted by CVE-2024-39498?
Red Hat and Debian distributions with the specified vulnerable kernel versions are most impacted by CVE-2024-39498.