CVE-2024-49901

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
21/10/2024
Last modified:
25/10/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs<br /> <br /> There are some cases, such as the one uncovered by Commit 46d4efcccc68<br /> ("drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails")<br /> where<br /> <br /> msm_gpu_cleanup() : platform_set_drvdata(gpu-&gt;pdev, NULL);<br /> <br /> is called on gpu-&gt;pdev == NULL, as the GPU device has not been fully<br /> initialized yet.<br /> <br /> Turns out that there&amp;#39;s more than just the aforementioned path that<br /> causes this to happen (e.g. the case when there&amp;#39;s speedbin data in the<br /> catalog, but opp-supported-hw is missing in DT).<br /> <br /> Assigning msm_gpu-&gt;pdev earlier seems like the least painful solution<br /> to this, therefore do so.<br /> <br /> Patchwork: https://patchwork.freedesktop.org/patch/602742/

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.6.55 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.10.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.11 (including) 6.11.3 (excluding)