CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null check for headpipe in dcn32acquireidlepipeforheadpipeinlayer
This commit addresses a potential null pointer dereference issue in the dcn32acquireidlepipeforheadpipeinlayer function. The issue could occur when headpipe is null.
The fix adds a check to ensure headpipe is not null before asserting it. If headpipe is null, the function returns NULL to prevent a potential null pointer dereference.
Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn32/dcn32resource.c:2690 dcn32acquireidlepipeforheadpipeinlayer() error: we previously assumed 'headpipe' could be null (see line 2681)
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49918?
CVE-2024-49918 is classified as a medium severity vulnerability due to the potential for a null pointer dereference in the Linux kernel.
How do I fix CVE-2024-49918?
To fix CVE-2024-49918, upgrade to Linux Kernel versions 6.12.11-1 or 6.12.12-1, or apply available patches for earlier versions as listed in the specifications.
Which systems are affected by CVE-2024-49918?
CVE-2024-49918 affects Linux Kernel versions up to and including 6.10.14 and certain versions in the 6.11 range.
What is the impact of CVE-2024-49918?
The impact of CVE-2024-49918 includes potential system instability due to unexpected null pointer dereferences.
When was CVE-2024-49918 published?
CVE-2024-49918 was published in 2024 as part of ongoing security updates for the Linux kernel.