CVE-2024-43907: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
drm/amdgpu/pm: Fix the null pointer dereference in applystateadjustrules
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Compensating control
In drm/amdgpu/pm, check the pointer value before dereferencing it in apply_state_adjust_rules to prevent a potential null pointer dereference.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43907?
CVE-2024-43907 is rated as a moderate severity vulnerability due to the potential for null pointer dereference in the Linux kernel.
How do I fix CVE-2024-43907?
To fix CVE-2024-43907, update your Linux kernel to version 5.10.226-1 or any version later than the vulnerable versions mentioned in the advisory.
Which versions of the Linux kernel are affected by CVE-2024-43907?
CVE-2024-43907 affects multiple Linux kernel versions including those from 5.10.224 to 5.10.223-1, 5.11, and various versions up to 6.10.5.
What is a null pointer dereference in the context of CVE-2024-43907?
A null pointer dereference occurs when the code attempts to access memory at an address that hasn't been allocated, leading to software crashes or unintended behavior.
Is CVE-2024-43907 specific to any particular distribution of Linux?
CVE-2024-43907 is not specific to a particular Linux distribution; however, it affects all distributions using vulnerable versions of the Linux kernel.