In the Linux kernel, the following vulnerability has been resolved:
drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is
assigned to mhdp_state->current_mode, and there is a dereference of it in
drm_mode_set_name(), which will lead to a NULL pointer dereference on
failure of drm_mode_duplicate().
Fix this bug add a check of mhdp_state->current_mode.
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c"
],
"versions": [
{
"version": "fb43aa0acdfd",
"lessThan": "85d1a27402f8",
"status": "affected",
"versionType": "git"
},
{
"version": "fb43aa0acdfd",
"lessThan": "89788cd9824c",
"status": "affected",
"versionType": "git"
},
{
"version": "fb43aa0acdfd",
"lessThan": "ca53b7efd4ba",
"status": "affected",
"versionType": "git"
},
{
"version": "fb43aa0acdfd",
"lessThan": "dcf53e6103b2",
"status": "affected",
"versionType": "git"
},
{
"version": "fb43aa0acdfd",
"lessThan": "32fb2ef124c3",
"status": "affected",
"versionType": "git"
},
{
"version": "fb43aa0acdfd",
"lessThan": "47889711da20",
"status": "affected",
"versionType": "git"
},
{
"version": "fb43aa0acdfd",
"lessThan": "935a92a1c400",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c"
],
"versions": [
{
"version": "5.10",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.10",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.219",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.161",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.1.93",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.6.33",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.8.12",
"lessThanOrEqual": "6.8.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.9.3",
"lessThanOrEqual": "6.9.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.10",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/32fb2ef124c3301656ac6c789a2ef35ef69a66da
git.kernel.org/stable/c/47889711da20be9b43e1e136e5cb68df37cbcc79
git.kernel.org/stable/c/85d1a27402f81f2e04b0e67d20f749c2a14edbb3
git.kernel.org/stable/c/89788cd9824c28ffcdea40232c458233353d1896
git.kernel.org/stable/c/935a92a1c400285545198ca2800a4c6c519c650a
git.kernel.org/stable/c/ca53b7efd4ba6ae92fd2b3085cb099c745e96965
git.kernel.org/stable/c/dcf53e6103b26e7458be71491d0641f49fbd5840