CVE-2024-49901
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
21/10/2024
Last modified:
25/10/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs<br />
<br />
There are some cases, such as the one uncovered by Commit 46d4efcccc68<br />
("drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails")<br />
where<br />
<br />
msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL);<br />
<br />
is called on gpu->pdev == NULL, as the GPU device has not been fully<br />
initialized yet.<br />
<br />
Turns out that there&#39;s more than just the aforementioned path that<br />
causes this to happen (e.g. the case when there&#39;s speedbin data in the<br />
catalog, but opp-supported-hw is missing in DT).<br />
<br />
Assigning msm_gpu->pdev earlier seems like the least painful solution<br />
to this, therefore do so.<br />
<br />
Patchwork: https://patchwork.freedesktop.org/patch/602742/
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.6.55 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.10.14 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11 (including) | 6.11.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



