CVE-2024-49896

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before comparing them [WHAT & HOW] amdgpu_dm can pass a null stream to dc_is_stream_unchanged. It is necessary to check for null before dereferencing them. This fixes 1 FORWARD_NULL issue reported by Coverity.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/0167d570f6a0b38689c4a0e50bf79c518d827500	Patch
https://git.kernel.org/stable/c/14db8692afe1aa2143b673856bb603713d8ea93f	Patch
https://git.kernel.org/stable/c/35ff747c86767937ee1e0ca987545b7eed7a0810	Patch
https://git.kernel.org/stable/c/3944d226f55235a960d8f1135927f95e9801be12
https://git.kernel.org/stable/c/42d31a33643813cce55ee1ebbad3a2d0d24a08e0	Patch
https://git.kernel.org/stable/c/471c53350ab83e47a2a117c2738ce0363785976e
https://git.kernel.org/stable/c/5b4b13e678b15975055f4ff1ce4cf0ce4c19b6c4	Patch
https://git.kernel.org/stable/c/e41a291e1bef1153bba091b6580ecc7affc53c82	Patch
https://git.kernel.org/stable/c/e8da54b7f8a17e44e67ea6d1037f35450af28115	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

08 Nov 2024, 16:15

Type	Values Removed	Values Added
References		() https://git.kernel.org/stable/c/3944d226f55235a960d8f1135927f95e9801be12 - () https://git.kernel.org/stable/c/471c53350ab83e47a2a117c2738ce0363785976e -

24 Oct 2024, 03:44

Type	Values Removed	Values Added
References	~~() https://git.kernel.org/stable/c/0167d570f6a0b38689c4a0e50bf79c518d827500 -~~	() https://git.kernel.org/stable/c/0167d570f6a0b38689c4a0e50bf79c518d827500 - Patch
References	~~() https://git.kernel.org/stable/c/14db8692afe1aa2143b673856bb603713d8ea93f -~~	() https://git.kernel.org/stable/c/14db8692afe1aa2143b673856bb603713d8ea93f - Patch
References	~~() https://git.kernel.org/stable/c/35ff747c86767937ee1e0ca987545b7eed7a0810 -~~	() https://git.kernel.org/stable/c/35ff747c86767937ee1e0ca987545b7eed7a0810 - Patch
References	~~() https://git.kernel.org/stable/c/42d31a33643813cce55ee1ebbad3a2d0d24a08e0 -~~	() https://git.kernel.org/stable/c/42d31a33643813cce55ee1ebbad3a2d0d24a08e0 - Patch
References	~~() https://git.kernel.org/stable/c/5b4b13e678b15975055f4ff1ce4cf0ce4c19b6c4 -~~	() https://git.kernel.org/stable/c/5b4b13e678b15975055f4ff1ce4cf0ce4c19b6c4 - Patch
References	~~() https://git.kernel.org/stable/c/e41a291e1bef1153bba091b6580ecc7affc53c82 -~~	() https://git.kernel.org/stable/c/e41a291e1bef1153bba091b6580ecc7affc53c82 - Patch
References	~~() https://git.kernel.org/stable/c/e8da54b7f8a17e44e67ea6d1037f35450af28115 -~~	() https://git.kernel.org/stable/c/e8da54b7f8a17e44e67ea6d1037f35450af28115 - Patch
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
First Time		Linux linux Kernel Linux
CWE		CWE-476
CPE		cpe:2.3:o:linux:linux_kernel::::::::

23 Oct 2024, 15:13

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: comprobar el flujo antes de compararlo [QUÉ Y CÓMO] amdgpu_dm puede pasar un flujo nulo a dc_is_stream_unchanged. Es necesario comprobar si hay valores nulos antes de desreferenciarlos. Esto soluciona 1 problema FORWARD_NULL informado por Coverity.

21 Oct 2024, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-10-21 18:15

Updated : 2024-11-08 16:15

NVD link : CVE-2024-49896

Mitre link : CVE-2024-49896

CVE.ORG link : CVE-2024-49896

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-476

NULL Pointer Dereference

5.5 /10