CVE-2024-43829: drm/qxl: Add check for drm_cvt_mode
In the Linux kernel, the following vulnerability has been resolved:
drm/qxl: Add check for drmcvtmode
Add check for the return value of drmcvtmode() and return the error if it fails in order to avoid NULL pointer dereference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.106-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.10.3-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43829?
CVE-2024-43829 has a medium severity rating due to the potential for NULL pointer dereference.
How do I fix CVE-2024-43829?
To fix CVE-2024-43829, update your Linux kernel to a version greater than 5.10.226-1 or one of the patched versions listed in the advisory.
Which Linux kernel versions are affected by CVE-2024-43829?
CVE-2024-43829 affects Linux kernel versions up to and including 5.10.223-1 and specific versions from 6.1.x to 6.12.x.
Is CVE-2024-43829 present in Debian-based systems?
Yes, CVE-2024-43829 is relevant for certain Debian packages of the Linux kernel as listed in the vulnerability report.
What is the nature of the vulnerability in CVE-2024-43829?
CVE-2024-43829 involves the lack of a check on the return value of drm_cvt_mode(), leading to a potential NULL pointer dereference.