CVE-2024-53200: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
First published: Fri Dec 27 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp This commit addresses a null pointer dereference issue in hwss_setup_dpp(). The issue could occur when pipe_ctx->plane_state is null. The fix adds a check to ensure `pipe_ctx->plane_state` is not null before accessing. This prevents a null pointer dereference.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=6.5<6.6.64 | |
| Linux Kernel | >=6.7<6.11.11 | |
| Linux Kernel | >=6.12<6.12.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-53200?
CVE-2024-53200 has a moderate severity due to the potential for a null pointer dereference impacting the Linux kernel's display functionality.
How do I fix CVE-2024-53200?
To fix CVE-2024-53200, update your Linux kernel to a version that includes the patch for the null pointer dereference in hwss_setup_dpp.
Which versions of Linux are affected by CVE-2024-53200?
CVE-2024-53200 affects Linux kernel versions between 6.5 and 6.6.64, 6.7 and 6.11.11, and 6.12 and 6.12.2.
What component of the Linux kernel is impacted by CVE-2024-53200?
CVE-2024-53200 impacts the Display Driver Management (DRM) subsystem, specifically in the AMD display code.
What could be the consequence of not addressing CVE-2024-53200?
Not addressing CVE-2024-53200 could lead to system instability or crashes due to a null pointer dereference in the display functionality.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/6.5
- version/linux kernel/6.7
- version/linux kernel/6.12