CVE-2024-49912

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'

This commit adds a null check for 'stream_status' in the function 'planes_changed_for_existing_stream'. Previously, the code assumed 'stream_status' could be null, but did not handle the case where it was actually null. This could lead to a null pointer dereference.

Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/core/dc_resource.c:3784 planes_changed_for_existing_stream() error: we previously assumed 'stream_status' could be null (see line 3774)

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < c4b699b93496c423b0e5b584d4eb4ab849313bcfaffected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 4778982c73d6c9f3fdbdbc6b6c8aa18df98251afaffected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < ec6c32b58e6c4e87760e797c525e99a460c82bcbaffected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 0ffd9fb03bbc99ed1eb5dc989d5c7da2faac0659affected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 8141f21b941710ecebe49220b69822cab3abd23daffected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux6.1.113 <= 6.1.*unaffected
LinuxLinux6.6.55 <= 6.6.*unaffected
LinuxLinux6.10.14 <= 6.10.*unaffected
LinuxLinux6.11.3 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References