CVE-2024-26729

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
03/04/2024
Last modified:
07/01/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv<br /> <br /> Fixes potential null pointer dereference warnings in the<br /> dc_dmub_srv_cmd_list_queue_execute() and dc_dmub_srv_is_hw_pwr_up()<br /> functions.<br /> <br /> In both functions, the &amp;#39;dc_dmub_srv&amp;#39; variable was being dereferenced<br /> before it was checked for null. This could lead to a null pointer<br /> dereference if &amp;#39;dc_dmub_srv&amp;#39; is null. The fix is to check if<br /> &amp;#39;dc_dmub_srv&amp;#39; is null before dereferencing it.<br /> <br /> Thus moving the null checks for &amp;#39;dc_dmub_srv&amp;#39; to the beginning of the<br /> functions to ensure that &amp;#39;dc_dmub_srv&amp;#39; is not null when it is<br /> dereferenced.<br /> <br /> Found by smatch &amp; thus fixing the below:<br /> drivers/gpu/drm/amd/amdgpu/../display/dc/dc_dmub_srv.c:133 dc_dmub_srv_cmd_list_queue_execute() warn: variable dereferenced before check &amp;#39;dc_dmub_srv&amp;#39; (see line 128)<br /> drivers/gpu/drm/amd/amdgpu/../display/dc/dc_dmub_srv.c:1167 dc_dmub_srv_is_hw_pwr_up() warn: variable dereferenced before check &amp;#39;dc_dmub_srv&amp;#39; (see line 1164)

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.7.7 (excluding)
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*