CVE-2024-49917

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw

This commit addresses a potential null pointer dereference issue in the dcn30_init_hw function. The issue could occur when dc->clk_mgr or dc->clk_mgr->funcs is null.

The fix adds a check to ensure dc->clk_mgr and dc->clk_mgr->funcs is not null before accessing its functions. This prevents a potential null pointer dereference.

Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c:789 dcn30_init_hw() error: we previously assumed 'dc->clk_mgr' could be null (see line 628)

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 23cb6139543580dc36743586ca86fbb3f7ab2c9daffected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 205e3b96cc9aa9211fd2c849a16245cf236b2d36affected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 5443c83eb8fd2f88c71ced38848fbf744d6206a2affected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 56c326577971adc3a230f29dfd3aa3abdd505f5daffected
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < cba7fec864172dadd953daefdd26e01742b71a6aaffected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.10.14 <= 6.10.*unaffected
LinuxLinux6.11.3 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References