CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null check for toppipetoprogram in commitplanesforstream
This commit addresses a null pointer dereference issue in the commitplanesforstream function at line 4140. The issue could occur when toppipetoprogram is null.
The fix adds a check to ensure toppipetoprogram is not null before accessing its streamres. This prevents a null pointer dereference.
Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/core/dc.c:4140 commitplanesforstream() error: we previously assumed 'toppipetoprogram' could be null (see line 3906)
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49913?
CVE-2024-49913 is classified as a moderate severity vulnerability due to the potential for a null pointer dereference in the Linux kernel.
How do I fix CVE-2024-49913?
To remediate CVE-2024-49913, update the Linux kernel to a fixed version, specifically to one greater than 5.10.227, or apply the patches provided in the associated security updates.
Which Linux kernel versions are affected by CVE-2024-49913?
CVE-2024-49913 affects multiple Linux kernel versions, specifically from 5.10.0 up to but not including 5.10.227, 5.11 up to 5.15.168, 5.16 up to 6.1.113, 6.2 up to 6.6.55, 6.7 up to 6.10.14, and 6.11.0 up to 6.11.3.
What is the impact of CVE-2024-49913?
The impact of CVE-2024-49913 is primarily the potential for a denial of service due to a null pointer dereference.
Is there an official patch for CVE-2024-49913?
Yes, there are official patches available for CVE-2024-49913 which are included in the latest updates of the affected Linux kernel versions.