CVE-2024-27041

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
01/05/2024
Last modified:
08/04/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amd/display: fix NULL checks for adev-&gt;dm.dc in amdgpu_dm_fini()<br /> <br /> Since &amp;#39;adev-&gt;dm.dc&amp;#39; in amdgpu_dm_fini() might turn out to be NULL<br /> before the call to dc_enable_dmub_notifications(), check<br /> beforehand to ensure there will not be a possible NULL-ptr-deref<br /> there.<br /> <br /> Also, since commit 1e88eb1b2c25 ("drm/amd/display: Drop<br /> CONFIG_DRM_AMD_DC_HDCP") there are two separate checks for NULL in<br /> &amp;#39;adev-&gt;dm.dc&amp;#39; before dc_deinit_callbacks() and dc_dmub_srv_destroy().<br /> Clean up by combining them all under one &amp;#39;if&amp;#39;.<br /> <br /> Found by Linux Verification Center (linuxtesting.org) with static<br /> analysis tool SVACE.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.14 (including) 6.6.23 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.7.11 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.8 (including) 6.8.2 (excluding)