CVE-2024-27040

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
01/05/2024
Last modified:
08/04/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amd/display: Add &amp;#39;replay&amp;#39; NULL check in &amp;#39;edp_set_replay_allow_active()&amp;#39;<br /> <br /> In the first if statement, we&amp;#39;re checking if &amp;#39;replay&amp;#39; is NULL. But in<br /> the second if statement, we&amp;#39;re not checking if &amp;#39;replay&amp;#39; is NULL again<br /> before calling replay-&gt;funcs-&gt;replay_set_power_opt().<br /> <br /> if (replay == NULL &amp;&amp; force_static)<br /> return false;<br /> <br /> ...<br /> <br /> if (link-&gt;replay_settings.replay_feature_enabled &amp;&amp;<br /> replay-&gt;funcs-&gt;replay_set_power_opt) {<br /> replay-&gt;funcs-&gt;replay_set_power_opt(replay, *power_opts, panel_inst);<br /> link-&gt;replay_settings.replay_power_opt_active = *power_opts;<br /> }<br /> <br /> If &amp;#39;replay&amp;#39; is NULL, this will cause a null pointer dereference.<br /> <br /> Fixes the below found by smatch:<br /> drivers/gpu/drm/amd/amdgpu/../display/dc/link/protocols/link_edp_panel_control.c:895 edp_set_replay_allow_active() error: we previously assumed &amp;#39;replay&amp;#39; could be null (see line 887)

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.6 (including) 6.6.23 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.7.11 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.8 (including) 6.8.2 (excluding)