CVE-2024-49972

CVE-2024-49972 affects the Linux kernel DRM-AMD display path. The issue arises when creating DML memory during DC state changes: if the DML memory allocation fails, previously allocated memory was not deallocated, leaving an uninitialized, non-NULL structure. The documented fix deallocates the me...

CVE-2024-49971 drm/amd/display: Increase array size of dummy_boolean

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase array size of dummyboolean WHY dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, i.e. hwdebug5 = &s-dummyboolean2, when dummyboolean has size of 2. Any assignment...

CVE-2024-49971 drm/amd/display: Increase array size of dummy_boolean

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase array size of dummyboolean WHY dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, i.e. hwdebug5 = &s-dummyboolean2, when dummyboolean has size of 2. Any assignment...

CVE-2024-49969 drm/amd/display: Fix index out of bounds in DCN30 color transformation

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addresses a potential index out of bounds issue in the cm3helpertranslatecurvetohwformat function in the DCN30 color management module. The issue...

CVE-2024-49970 drm/amd/display: Implement bounds check for stream encoder creation in DCN401

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN401 'streamencregs' array is an array of dcn10streamencregisters structures. The array is initialized with four elements, corresponding to the four calls t...

CVE-2024-49970

CVE-2024-49970 affects the Linux kernel DRM AMD display path. The issue is a bounds check failure in dcn401_stream_encoder_create for the DCN401 encoder: the stream_enc_regs array, sized for indices 0–3, could be accessed with eng_id = 5, causing a buffer overflow and undefined behavior. The vuln...

CVE-2024-49970 drm/amd/display: Implement bounds check for stream encoder creation in DCN401

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN401 'streamencregs' array is an array of dcn10streamencregisters structures. The array is initialized with four elements, corresponding to the four calls t...

CVE-2024-49923

The CVE-2024-49923 issue is in the Linux kernel’s DRM/AMD display path. Specifically, dcn20_validate_apply_pipe_split_flags could dereference a null pointer; the patch passes a non-null pointer to fix a null-dereference. Impact is limited to availability (HIGH) with local, low-complexity exploita...

CVE-2024-49923 drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Pass non-null to dcn20validateapplypipesplitflags WHAT & HOW "dcn20validateapplypipesplitflags" dereferences merge, and thus it cannot be a null pointer. Let's pass a valid pointer to avoid null dereference. This...

CVE-2024-49923 drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Pass non-null to dcn20validateapplypipesplitflags WHAT & HOW "dcn20validateapplypipesplitflags" dereferences merge, and thus it cannot be a null pointer. Let's pass a valid pointer to avoid null dereference. This...

CVE-2024-49923 drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Pass non-null to dcn20validateapplypipesplitflags WHAT & HOW "dcn20validateapplypipesplitflags" dereferences merge, and thus it cannot be a null pointer. Let's pass a valid pointer to avoid null dereference. This...

CVE-2024-49921 drm/amd/display: Check null pointers before used

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before used WHAT & HOW Poniters, such as dc-clkmgr, are null checked previously in the same function, so Coverity warns "implies that "dc-clkmgr" might be null". As a result, these pointers ne...

CVE-2024-49922 drm/amd/display: Check null pointers before using them

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using them WHAT & HOW These pointers are null checked previously in the same function, indicating they might be null as reported by Coverity. As a result, they need to be checked when...

CVE-2024-49922

The CVE-2024-49922 entry concerns the Linux kernel DRM AMD display driver. The issue arises from using pointers that may be NULL in a path where they had been validated earlier in the same function, triggering null-pointer handling after use. The vulnerability is mitigated by a fix that adds null...

CVE-2024-49921 drm/amd/display: Check null pointers before used

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before used WHAT & HOW Poniters, such as dc-clkmgr, are null checked previously in the same function, so Coverity warns "implies that "dc-clkmgr" might be null". As a result, these pointers ne...

CVE-2024-49922 drm/amd/display: Check null pointers before using them

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using them WHAT & HOW These pointers are null checked previously in the same function, indicating they might be null as reported by Coverity. As a result, they need to be checked when...

CVE-2024-49920 drm/amd/display: Check null pointers before multiple uses

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before multiple uses WHAT & HOW Poniters, such as streamenc and dc-bwvbios, are null checked previously in the same function, so Coverity warns "implies that streamenc and dc-bwvbios might be...

CVE-2024-49920

The CVE-2024-49920 entry concerns the Linux kernel DRM/AMD display subsystem. The vulnerability arises from a null-pointer risk in the AMD display path, where pointers such as stream_enc and dc->bw_vbios are used multiple times after a check that is only performed earlier in the function. The ...

CVE-2024-49920 drm/amd/display: Check null pointers before multiple uses

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before multiple uses WHAT & HOW Poniters, such as streamenc and dc-bwvbios, are null checked previously in the same function, so Coverity warns "implies that streamenc and dc-bwvbios might be...

CVE-2024-49919 drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for headpipe in dcn201acquirefreepipeforlayer This commit addresses a potential null pointer dereference issue in the dcn201acquirefreepipeforlayer function. The issue could occur when headpipe is...