CVE-2024-50156

drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()

Medium · published November 7, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()

If the allocation in msm_disp_state_dump_regs() failed then

`block->state` can be NULL. The msm_disp_state_print_regs() function

_does_ have code to try to handle it with:

if (*reg)

dump_addr = *reg;

...but since "dump_addr" is initialized to NULL the above is actually

a noop. The code then goes on to dereference `dump_addr`.

Make the function print "Registers not stored" when it sees a NULL to

solve this. Since we're touching the code, fix

msm_disp_state_print_regs() not to pointlessly take a double-pointer

and properly mark the pointer as `const`.

Patchwork: https://patchwork.freedesktop.org/patch/619657/

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Published
2024-11-07T09:31Z
EPSS history
Timeline
  • 07 NOV 09:31Z
    drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
    cvelistv5