CVE-2024-49916: drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add NULL check for clkmgr and clkmgr->funcs in dcn401inithw
This commit addresses a potential null pointer dereference issue in the dcn401inithw function. The issue could occur when dc->clkmgr or dc->clkmgr->funcs is null.
The fix adds a check to ensure dc->clkmgr and dc->clkmgr->funcs is not null before accessing its functions. This prevents a potential null pointer dereference.
Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn401/dcn401hwseq.c:416 dcn401inithw() error: we previously assumed 'dc->clkmgr' could be null (see line 225)
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49916?
CVE-2024-49916 has been categorized as a potential null pointer dereference vulnerability, which can lead to system instability.
How do I fix CVE-2024-49916?
To fix CVE-2024-49916, upgrade to Linux kernel version 6.12.12-1 or 6.12.15-1, or apply patches if available for affected versions.
What versions of the Linux kernel are affected by CVE-2024-49916?
CVE-2024-49916 affects Linux kernel versions up to 6.11.3 and those within specific versions of the Debian package.
Is CVE-2024-49916 present in Debian packages?
Yes, CVE-2024-49916 is present in Debian packages up to versions 5.10.226-1 and 6.1.128-1.
What systems are at risk from CVE-2024-49916?
Systems running affected versions of the Linux kernel, particularly those using AMD display drivers, are at risk from CVE-2024-49916.