CVE-2024-53201

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

This commit addresses a null pointer dereference issue in dcn20_program_pipe(). Previously, commit 8e4ed3cf1642 ("drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe") partially fixed the null pointer dereference issue. However, in dcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and plane_state is accessed again through pipe_ctx. Multiple if statements directly call attributes of plane_state, leading to potential null pointer dereference issues. This patch adds necessary null checks to ensure stability.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux65a6fee22d5cfa645cb05489892dc9cd3d142fc2 < 6b4ee2560d4d8de2688da68cd9581177035e0876affected
LinuxLinux8e4ed3cf1642df0c4456443d865cff61a9598aa8 < 3609259326171cd5b98462636580fb2ae5c87d40affected
LinuxLinux8e4ed3cf1642df0c4456443d865cff61a9598aa8 < 6a057072ddd127255350357dd880903e8fa23f36affected
LinuxLinux68f75e6f08aad66069a629db8d7840919156c761affected
LinuxLinux6.11.3 < 6.11.11affected
LinuxLinux6.6.64 < 6.7affected
LinuxLinux6.12affected
LinuxLinux0 < 6.12unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References