CVE-2024-27041
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
01/05/2024
Last modified:
08/04/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()<br />
<br />
Since &#39;adev->dm.dc&#39; in amdgpu_dm_fini() might turn out to be NULL<br />
before the call to dc_enable_dmub_notifications(), check<br />
beforehand to ensure there will not be a possible NULL-ptr-deref<br />
there.<br />
<br />
Also, since commit 1e88eb1b2c25 ("drm/amd/display: Drop<br />
CONFIG_DRM_AMD_DC_HDCP") there are two separate checks for NULL in<br />
&#39;adev->dm.dc&#39; before dc_deinit_callbacks() and dc_dmub_srv_destroy().<br />
Clean up by combining them all under one &#39;if&#39;.<br />
<br />
Found by Linux Verification Center (linuxtesting.org) with static<br />
analysis tool SVACE.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.14 (including) | 6.6.23 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.7.11 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8 (including) | 6.8.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b
- https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c
- https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957
- https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811
- https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b
- https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c
- https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957
- https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811



