drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes

...

CVE-2024-41095

A flaw was found in the Linux kernel’s nouveau module. The return value of the drmmodeduplicate function is not checked in the nv17tvgetldmodes function in the drivers/gpu/drm/nouveau/dispnv04/tvnv17.c file, possibly causing a NULL pointer dereference and resulting in a denial of service...

CVE-2024-41095 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgetldmodes In nv17tvgetldmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

CVE-2024-41095 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgetldmodes In nv17tvgetldmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

CVE-2024-41089 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes In nv17tvgethdmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

CVE-2024-41089 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes In nv17tvgethdmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

CVE-2024-41089

CVE-2024-41089 relates to the Linux kernel DRM/Nouveau code path: in nv17_tv_get_hd_modes(), the return of drm_mode_duplicate() (and drm_cvt_mode()) could be NULL on failure, leading to a NULL pointer dereference. The fix adds a NULL check to avoid dereferencing a NULL mode object. Impact is a lo...