CVE-2024-27040

drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'

Medium · published May 1, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'

In the first if statement, we're checking if 'replay' is NULL. But in

the second if statement, we're not checking if 'replay' is NULL again

before calling replay->funcs->replay_set_power_opt().

if (replay == NULL && force_static)

return false;

...

if (link->replay_settings.replay_feature_enabled &&

replay->funcs->replay_set_power_opt) {

replay->funcs->replay_set_power_opt(replay, *power_opts, panel_inst);

link->replay_settings.replay_power_opt_active = *power_opts;

}

If 'replay' is NULL, this will cause a null pointer dereference.

Fixes the below found by smatch:

drivers/gpu/drm/amd/amdgpu/../display/dc/link/protocols/link_edp_panel_control.c:895 edp_set_replay_allow_active() error: we previously assumed 'replay' could be null (see line 887)

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Published
2024-05-01T12:54Z
EPSS history
Timeline
  • 01 MAY 12:54Z
    drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'
    cvelistv5