CVE-2024-49904: drm/amdgpu: add list empty check to avoid null pointer issue
drm/amdgpu: add list empty check to avoid null pointer issue
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.11.4-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In the Linux kernel drm/amdgpu code, add a list-empty check before using list_for_each_entry_safe() to avoid null pointer issues in corner cases.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49904?
CVE-2024-49904 has a moderate severity level due to potential null pointer dereference issues in the Linux kernel.
How do I fix CVE-2024-49904?
To address CVE-2024-49904, upgrade to Linux kernel version 6.10.14 or apply the relevant patches available for affected versions.
Which Linux kernel versions are affected by CVE-2024-49904?
CVE-2024-49904 affects Linux kernel versions from 6.11 to 6.11.3 and any version below 6.10.14.
What components are impacted by CVE-2024-49904?
CVE-2024-49904 impacts the DRM (Direct Rendering Manager) component, specifically the amdgpu driver in the Linux kernel.
Is CVE-2024-49904 publicly known and have any exploits been reported?
Yes, CVE-2024-49904 is publicly known but there are currently no reports of active exploits in the wild.