CVE-2024-46694 drm/amd/display: avoid using null object of framebuffer

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

CVE-2024-46694

CVE-2024-46694 affects the Linux kernel DRM/AMD display path. Root cause: code path dereferenced framebuffer object state->fb->obj[0] without proper null checks. Fix: replace with proper retrieval of the framebuffer object via drm_gem_fb_get_obj() and return an error if the object is NULL (...

CVE-2024-46694 drm/amd/display: avoid using null object of framebuffer

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

drm/amd/display: Fix division by zero in setup_dsc_config

...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12610)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12610 advisory. - MIPS: Octeon: Add PCIe link status check Dave Kleikamp Orabug: 36947196 CVE-2024-40968 - drm/amdgpu: Fix signedness bug in sdmav40processtrapirq...

CLSA-2024-1725876080 kernel: Fix of 44 CVEs

dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist CVE-2024-40956 - userfaultfd: fix a race between writeprotect and exitmmap CVE-2021-47461 - netfilter: nftables: use timestamp to check for set element timeout CVE-2024-27397 - x86/sev: Harden VC instruction emulation somewhat...

CVE-2024-44955

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't refer to dcsink in isdscneedrecompute Why When unplug one of monitors connected after mst hub, encounter null pointer dereference. It's due to dcsink get released immediately in earlyunregister or detectctx...

CVE-2024-44955

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-44955

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-44955

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-44955

...

CVE-2024-44955

CVE-2024-44955 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2024-44955

...

CVE-2024-44955

Removed by vendor...

CVE-2024-43899

A NULL pointer dereference vulnerability was found in dcn20getdcccompressioncap function in the dcn20resource.c file in the AMD GPU driver in the Linux Kernel. This issue could allow an attacker to make the system hang when using the mpv media player with specific hardware acceleration options...

CVE-2024-43895

A vulnerability was found in the Linux kernel’s AMD display driver, which caused a NULL pointer dereference during the setup of Multi-Stream Transport MST and Display Stream Compression DSC. This issue occurred when the driver attempted to recompute DSC parameters without an active stream on the...

CVE-2024-43904

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and 'plane' variables in the dcn30applyidlepoweroptimizations function. These variables were previously...

CVE-2024-43902

A NULL pointer dereference issue was found in the AMD Display drm/amd/display subsystem of the Linux kernel in amdgpudm.c. If an attacker can manipulate the input to functions that may not have proper NULL checks, they could trigger a situation where the system dereferences a NULL pointer, leadin...

CVE-2024-43901

A NULL pointer dereference vulnerability was found in the AMD Display drm/amd/display subsystem of the Linux kernel when users attempt to access the DTN log. When the command cat /sys/kernel/debug/dri/0/amdgpudmdtnlog to access the DTN log is run, the code attempts to read the gamut remap...

CVE-2024-43886

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resourcelogpipetopologyupdate WHY When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads...