CVE-2024-49907

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49907
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc->clk_mgr [WHY & HOW] dc->clk_mgr is null checked previously in the same function, indicating it might be null. Passing "dc" to "dc->hwss.apply_idle_power_optimizations", which dereferences null "dc->clk_mgr". (The function pointer resolves to "dcn35_apply_idle_power_optimizations".) This fixes 1 FORWARD_NULL issue reported by Coverity.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3f7e533c10db3d0158709a99e2129ff63add6bcd Patch
https://git.kernel.org/stable/c/5ba3fbf75b243b2863a8be9e7c393e003d3b88f3 Patch
https://git.kernel.org/stable/c/8d54001f8dccd56146973f23f3ab2ba037a21251 Patch
https://git.kernel.org/stable/c/95d9e0803e51d5a24276b7643b244c7477daf463 Patch
https://git.kernel.org/stable/c/9641bc4adf8446034e490ed543ae7e9833cfbdf5 Patch
https://git.kernel.org/stable/c/a2773e0a4b79e7a6463abdffaf8cc4f24428ba18 Patch
https://git.kernel.org/stable/c/a545a9403e04c6e17fdc04a26a61d9feebbba106 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Oct 2024, 03:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3f7e533c10db3d0158709a99e2129ff63add6bcd - () https://git.kernel.org/stable/c/3f7e533c10db3d0158709a99e2129ff63add6bcd - Patch
References () https://git.kernel.org/stable/c/5ba3fbf75b243b2863a8be9e7c393e003d3b88f3 - () https://git.kernel.org/stable/c/5ba3fbf75b243b2863a8be9e7c393e003d3b88f3 - Patch
References () https://git.kernel.org/stable/c/8d54001f8dccd56146973f23f3ab2ba037a21251 - () https://git.kernel.org/stable/c/8d54001f8dccd56146973f23f3ab2ba037a21251 - Patch
References () https://git.kernel.org/stable/c/95d9e0803e51d5a24276b7643b244c7477daf463 - () https://git.kernel.org/stable/c/95d9e0803e51d5a24276b7643b244c7477daf463 - Patch
References () https://git.kernel.org/stable/c/9641bc4adf8446034e490ed543ae7e9833cfbdf5 - () https://git.kernel.org/stable/c/9641bc4adf8446034e490ed543ae7e9833cfbdf5 - Patch
References () https://git.kernel.org/stable/c/a2773e0a4b79e7a6463abdffaf8cc4f24428ba18 - () https://git.kernel.org/stable/c/a2773e0a4b79e7a6463abdffaf8cc4f24428ba18 - Patch
References () https://git.kernel.org/stable/c/a545a9403e04c6e17fdc04a26a61d9feebbba106 - () https://git.kernel.org/stable/c/a545a9403e04c6e17fdc04a26a61d9feebbba106 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: comprobar punteros nulos antes de usar dc->clk_mgr [POR QUÉ Y CÓMO] dc->clk_mgr se ha comprobado como nulo previamente en la misma función, lo que indica que podría ser nulo. Pasar "dc" a "dc->hwss.apply_idle_power_optimizations", lo que desreferencia el puntero nulo "dc->clk_mgr". (El puntero de función se resuelve en "dcn35_apply_idle_power_optimizations"). Esto soluciona 1 problema FORWARD_NULL informado por Coverity.

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2024-10-24 03:42

NVD link : CVE-2024-49907

Mitre link : CVE-2024-49907

CVE.ORG link : CVE-2024-49907

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference