CVE-2024-43886: drm/amd/display: Add null check in resource_log_pipe_topology_update
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null check in resourcelogpipetopologyupdate
[WHY] When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads to a null pointer dereference.
[HOW] Added a null check in dcresource.c/resourcelogpipetopologyupdate.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43886?
CVE-2024-43886 has been classified with a severity rating determined by the impact it poses on system integrity and availability.
How do I fix CVE-2024-43886?
To resolve CVE-2024-43886, update the Linux kernel to version 6.12.11-1 or later.
Which Linux kernel versions are affected by CVE-2024-43886?
CVE-2024-43886 affects Linux kernel versions prior to 6.10.5 and specific Debian versions up to 6.1.123-1.
What type of vulnerability is CVE-2024-43886?
CVE-2024-43886 is a resource management issue related to the Linux kernel's handling of display resources.
Has CVE-2024-43886 been resolved by the Linux community?
Yes, CVE-2024-43886 has been addressed in recent patches made available by the Linux kernel developers.