Important: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

RHEL 9 : linux-firmware (RHSA-2024:5980)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5980 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: amd: SMM Lock Bypa...

RHEL 7 : linux-firmware (RHSA-2024:5982)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5982 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: amd: SMM Lock Bypa...

CVE-2024-43899

A NULL pointer dereference vulnerability was found in dcn20getdcccompressioncap function in the dcn20resource.c file in the AMD GPU driver in the Linux Kernel. This issue could allow an attacker to make the system hang when using the mpv media player with specific hardware acceleration options...

CVE-2024-43895

A vulnerability was found in the Linux kernel’s AMD display driver, which caused a NULL pointer dereference during the setup of Multi-Stream Transport MST and Display Stream Compression DSC. This issue occurred when the driver attempted to recompute DSC parameters without an active stream on the...

CVE-2024-43904

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and 'plane' variables in the dcn30applyidlepoweroptimizations function. These variables were previously...

CVE-2024-43905

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix the null pointer dereference for vega10hwmgr Check return value and conduct null pointer handling to avoid null pointer dereference...

CVE-2024-43902

A NULL pointer dereference issue was found in the AMD Display drm/amd/display subsystem of the Linux kernel in amdgpudm.c. If an attacker can manipulate the input to functions that may not have proper NULL checks, they could trigger a situation where the system dereferences a NULL pointer, leadin...

CVE-2024-43901

A NULL pointer dereference vulnerability was found in the AMD Display drm/amd/display subsystem of the Linux kernel when users attempt to access the DTN log. When the command cat /sys/kernel/debug/dri/0/amdgpudmdtnlog to access the DTN log is run, the code attempts to read the gamut remap...

CVE-2024-43886

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resourcelogpipetopologyupdate WHY When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads...

Moderate: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

hw: amd: SMM Lock Bypass

A flaw was found in hw. Improper validation in a model-specific register MSR could allow a malicious program with ring0 access to modify the SMM configuration while the SMI lock is enabled. This issue can lead to arbitrary code execution...

SUSE CVE-2024-43899

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20resource.c Fixes a hang thats triggered when MPV is run on a DCN401 dGPU: mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all and then enabling fullscreen playback double click on the vid...

SUSE CVE-2024-43902

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing variables to functions. This fixes 3 NULLRETURNS issues reported by Coverity...

CLSA-2024-1724693366 kernel: Fix of 15 CVEs

net: ice: Fix potential NULL pointer dereference in icebridgesetlink CVE-2024-26855 - tty: Fix out-of-bound vmalloc access in imageblit CVE-2021-47383 - drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - Revert: GFS2: Skip dlmunlock calls during unmount CVE-2024-38570 -...

CVE-2024-43899

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20resource.c Fixes a hang thats triggered when MPV is run on a DCN401 dGPU: mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all and then enabling fullscreen playback double click on the vid...

CVE-2024-43901

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401 When users run the command: cat /sys/kernel/debug/dri/0/amdgpudmdtnlog The following NULL pointer dereference happens: +0.000003 BUG: kernel NULL pointer...

AZL-48225 CVE-2024-43902 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing variables to functions. This fixes 3 NULLRETURNS issues reported by Coverity...

AZL-48209 CVE-2024-43899 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20resource.c Fixes a hang thats triggered when MPV is run on a DCN401 dGPU: mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all and then enabling fullscreen playback double click on the vid...