Lucene search

K
osvGoogleOSV:CVE-2024-39498
HistoryJul 12, 2024 - 1:15 p.m.

CVE-2024-39498

2024-07-1213:15:12
Google
osv.dev
3
linux kernel
vulnerability
drm/mst
null pointer
regression
input parameter

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:

drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2

[Why]
Commit:

  • commit 5aa1dfcdf0a4 (“drm/mst: Refactor the flow for payload allocation/removement”)
    accidently overwrite the commit
  • commit 54d217406afe (“drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2”)
    which cause regression.

[How]
Recover the original NULL fix and remove the unnecessary input parameter ‘state’ for
drm_dp_add_payload_part2().

(cherry picked from commit 4545614c1d8da603e57b60dd66224d81b6ffc305)

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High