CVE-2024-56776: drm/sti: avoid potential dereference of error pointers
First published: Wed Jan 08 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=4.6<5.15.174 | |
| Linux Kernel | >=5.16<6.1.120 | |
| Linux Kernel | >=6.2<6.6.64 | |
| Linux Kernel | >=6.7<6.12.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/e98ff67f5a68114804607de549c2350d27628fc7
- https://git.kernel.org/stable/c/40725c5fabee804fecce41d4d5c5bae80c45e1c4
- https://git.kernel.org/stable/c/8ab73ac97c0fa528f66eeccd9bb53eb6eb7d20dc
- https://git.kernel.org/stable/c/f67786293193cf01ebcc6fdbcbd1587b24f52679
- https://git.kernel.org/stable/c/831214f77037de02afc287eae93ce97f218d8c04
Frequently Asked Questions
What is the severity of CVE-2024-56776?
CVE-2024-56776 has a high severity due to potential dereference of error pointers leading to vulnerabilities in the Linux kernel.
How do I fix CVE-2024-56776?
To fix CVE-2024-56776, update your Linux kernel to a version that includes the security patches.
Which versions of the Linux kernel are affected by CVE-2024-56776?
CVE-2024-56776 affects Linux kernel versions from 4.6 to 5.15.174, from 5.16 to 6.1.120, from 6.2 to 6.6.64, and from 6.7 to 6.12.4.
What component of the Linux kernel is impacted by CVE-2024-56776?
CVE-2024-56776 impacts the drm/sti component of the Linux kernel.
Is there a workaround for CVE-2024-56776?
No official workaround is recommended for CVE-2024-56776; the best course of action is to apply the updated kernel.
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/remedy
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.6
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7