CVE-2024-43894: drm/client: fix null pointer dereference in drm_client_modeset_probe
drm/client: fix null pointer dereference in drmclientmodesetprobe
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Compensating control
In drm_client_modeset_probe(), check whether drm_mode_duplicate() returns NULL before assigning to or dereferencing modeset->mode, and handle the failure safely.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43894?
CVE-2024-43894 has a severity rating that indicates it may lead to a null pointer dereference in certain conditions.
How do I fix CVE-2024-43894?
To resolve CVE-2024-43894, upgrade to the patched versions provided for the Linux kernel and related packages.
Which Linux kernel versions are vulnerable to CVE-2024-43894?
Linux kernel versions up to and including 5.10.223-1 and several versions in the 6.x series are vulnerable to CVE-2024-43894.
What impact does CVE-2024-43894 have on system operations?
CVE-2024-43894 can potentially cause crashes or lead to instability in systems using affected versions of the Linux kernel.
Can CVE-2024-43894 be exploited remotely?
While CVE-2024-43894 primarily concerns local exploitation through user-space applications, impacts may vary based on system configuration.