CVE-2024-49908
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
21/10/2024
Last modified:
24/10/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amd/display: Add null check for &#39;afb&#39; in amdgpu_dm_update_cursor (v2)<br />
<br />
This commit adds a null check for the &#39;afb&#39; variable in the<br />
amdgpu_dm_update_cursor function. Previously, &#39;afb&#39; was assumed to be<br />
null at line 8388, but was used later in the code without a null check.<br />
This could potentially lead to a null pointer dereference.<br />
<br />
Changes since v1:<br />
- Moved the null check for &#39;afb&#39; to the line where &#39;afb&#39; is used. (Alex)<br />
<br />
Fixes the below:<br />
drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm.c:8433 amdgpu_dm_update_cursor()<br />
error: we previously assumed &#39;afb&#39; could be null (see line 8388)
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



