CVE-2024-49916

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw

This commit addresses a potential null pointer dereference issue in the dcn401_init_hw function. The issue could occur when dc->clk_mgr or dc->clk_mgr->funcs is null.

The fix adds a check to ensure dc->clk_mgr and dc->clk_mgr->funcs is not null before accessing its functions. This prevents a potential null pointer dereference.

Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn401/dcn401_hwseq.c:416 dcn401_init_hw() error: we previously assumed 'dc->clk_mgr' could be null (see line 225)

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < ac1c41e318074d8a9ea925787e366be15d7645e8affected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 4b6377f0e96085cbec96eb7f0b282430ccdd3d75affected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux6.11.3 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References