CVE-2024-49908: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null check for 'afb' in amdgpudmupdatecursor (v2)
This commit adds a null check for the 'afb' variable in the amdgpudmupdatecursor function. Previously, 'afb' was assumed to be null at line 8388, but was used later in the code without a null check. This could potentially lead to a null pointer dereference.
Changes since v1: - Moved the null check for 'afb' to the line where 'afb' is used. (Alex)
Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpudm/amdgpudm.c:8433 amdgpudmupdatecursor() error: we previously assumed 'afb' could be null (see line 8388)
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49908?
CVE-2024-49908 has been classified with a moderate severity level due to the potential to cause instability in the affected systems.
How do I fix CVE-2024-49908?
To fix CVE-2024-49908, update the Linux kernel to version 6.12.10-1 or later.
What systems are affected by CVE-2024-49908?
CVE-2024-49908 affects versions of the Linux kernel up to 6.11.3 and specific distributions such as Debian.
Is CVE-2024-49908 being actively exploited?
As of now, there is no public information indicating that CVE-2024-49908 is being actively exploited in the wild.
What does CVE-2024-49908 impact in the Linux kernel?
CVE-2024-49908 impacts the AMD GPU driver, specifically the amdgpu_dm_update_cursor function, by adding a null check for the 'afb' variable.