CVE-2024-42310: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Compensating control
In cdv_intel_lvds_get_modes(), check whether drm_mode_duplicate() returns NULL before assigning or dereferencing mode, and handle the failure path to prevent a NULL pointer dereference.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42310?
CVE-2024-42310 is classified as a high-severity vulnerability due to the potential for a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2024-42310?
To fix CVE-2024-42310, update your Linux kernel to versions 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1 or apply the relevant patches.
Which Linux versions are affected by CVE-2024-42310?
CVE-2024-42310 affects various Linux kernel versions including those less than or equal to 5.10.223-1 and others in the specified ranges.
What is the impact of CVE-2024-42310?
The impact of CVE-2024-42310 may allow attackers to cause a denial of service through a NULL pointer dereference.
Is CVE-2024-42310 a local or remote vulnerability?
CVE-2024-42310 is generally considered a local vulnerability as it typically requires local access to the affected system to exploit.