CVE-2024-49910: drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add NULL check for function pointer in dcn401setoutputtransferfunc
This commit adds a null check for the setoutputgamma function pointer in the dcn401setoutputtransferfunc function. Previously, setoutputgamma was being checked for null, but then it was being dereferenced without any null check. This could lead to a null pointer dereference if setoutputgamma is null.
To fix this, we now ensure that setoutputgamma is not null before dereferencing it. We do this by adding a null check for setoutputgamma before the call to setoutputgamma.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49910?
CVE-2024-49910 is classified as a medium severity vulnerability due to potential impacts on system integrity.
How do I fix CVE-2024-49910?
To fix CVE-2024-49910, update the Linux kernel to versions 6.12.12-1 or 6.12.15-1, or appropriate patched versions provided by your Linux distribution.
What systems are affected by CVE-2024-49910?
CVE-2024-49910 affects various versions of the Linux kernel, specifically versions before 6.11.3 and certain patched versions in the Debian distribution.
Is CVE-2024-49910 a zero-day vulnerability?
CVE-2024-49910 is not classified as a zero-day vulnerability as it has been addressed and resolved in the kernel updates.
What is the root cause of CVE-2024-49910?
The root cause of CVE-2024-49910 is a lack of a null check for a function pointer in the dcn401_set_output_transfer_func, which could lead to potential system misbehavior.