CVE-2021-47362

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
21/05/2024
Last modified:
26/12/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amd/pm: Update intermediate power state for SI<br /> <br /> Update the current state as boot state during dpm initialization.<br /> During the subsequent initialization, set_power_state gets called to<br /> transition to the final power state. set_power_state refers to values<br /> from the current state and without current state populated, it could<br /> result in NULL pointer dereference.<br /> <br /> For ex: on platforms where PCI speed change is supported through ACPI<br /> ATCS method, the link speed of current state needs to be queried before<br /> deciding on changing to final power state&amp;#39;s link speed. The logic to query<br /> ATCS-support was broken on certain platforms. The issue became visible<br /> when broken ATCS-support logic got fixed with commit<br /> f9b7f3703ff9 ("drm/amdgpu/acpi: make ATPX/ATCS structures global (v2)").<br /> <br /> Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1698

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.10.70 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.14.9 (excluding)
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*