CVE-2024-43905: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
drm/amd/pm: Fix the null pointer dereference for vega10hwmgr
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Compensating control
In the Linux kernel drm/amd/pm vega10_hwmgr code, check return values and handle null pointers to prevent null pointer dereferences.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43905?
CVE-2024-43905 has a high severity rating due to the potential for a null pointer dereference leading to a system crash.
How do I fix CVE-2024-43905?
To fix CVE-2024-43905, update the Linux kernel to a version higher than 6.1.105 or apply the recommended patches available from your distribution.
What software is affected by CVE-2024-43905?
CVE-2024-43905 affects multiple versions of the Linux kernel, specifically those between versions 6.2 and 6.6.46, and other specified versions.
What problems does CVE-2024-43905 cause?
CVE-2024-43905 can lead to system instability and crashes when the vega10_hwmgr fails to handle null pointer dereferences properly.
How can I verify if my system is vulnerable to CVE-2024-43905?
To verify if your system is vulnerable to CVE-2024-43905, check the installed Linux kernel version against the affected version ranges.