CVE-2024-53201CWE-476

CVE-2024-53201

Medium · published December 27, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

This commit addresses a null pointer dereference issue in

dcn20_program_pipe(). Previously, commit 8e4ed3cf1642 ("drm/amd/display:

Add null check for pipe_ctx->plane_state in dcn20_program_pipe")

partially fixed the null pointer dereference issue. However, in

dcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and

plane_state is accessed again through pipe_ctx. Multiple if statements

directly call attributes of plane_state, leading to potential null

pointer dereference issues. This patch adds necessary null checks to

ensure stability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.8th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-12-27T19:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6.64, < 6.76.7
linux/linux_kernel≥ 6.11.3, < 6.11.116.11.11
linux/linux_kernel≥ 6.12, < 6.12.26.12.2
References (4)
EPSS history
Timeline
  • 27 DEC 13:49Z
    drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
    cvelistv5