CVE-2024-49908

drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)

This commit adds a null check for the 'afb' variable in the

amdgpu_dm_update_cursor function. Previously, 'afb' was assumed to be

null at line 8388, but was used later in the code without a null check.

This could potentially lead to a null pointer dereference.

Changes since v1:

- Moved the null check for 'afb' to the line where 'afb' is used. (Alex)

Fixes the below:

drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm.c:8433 amdgpu_dm_update_cursor()

error: we previously assumed 'afb' could be null (see line 8388)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Published
2024-10-21T18:01Z
EPSS history
Timeline
  • 21 OCT 18:01Z
    drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
    cvelistv5