CVE-2024-56777

CVE-2024-56777 affects the Linux kernel DRM STI path. The vulnerability arises because the return value of drm_atomic_get_crtc_state() is not checked before dereferencing the potential error pointer crtc_state in sti_gdp_atomic_check, which can lead to an invalid memory access if the call fails. ...

CVE-2024-56776 drm/sti: avoid potential dereference of error pointers

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

CVE-2024-56776 drm/sti: avoid potential dereference of error pointers

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

CVE-2024-56775 drm/amd/display: Fix handling of plane refcount

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...

CVE-2024-56775 drm/amd/display: Fix handling of plane refcount

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...

CVE-2024-56538

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpkms: Unplug DRM device before removal Prevent userspace accesses to the DRM device from causing use-after-frees by unplugging the device before we remove it. This causes any further userspace accesses to result in an...

CVE-2024-56775: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...

CVE-2024-56778: Improper Check for Unusual or Exceptional Conditions

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stihqvdpatomiccheck The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

CVE-2024-56784: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to prevent memory corruption Why & How Array indices out of bound caused memory corruption. Adding checks to ensure that array index stays in bound...

CVE-2024-56777: Improper Check for Unusual or Exceptional Conditions

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stigdpatomiccheck The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

PT-2025-3325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel, specifically in the drm/sti module, to avoid the potential dereference of error pointers in sti hqvdp atomic check. The return valu...

CVE-2024-56776: Improper Check for Unusual or Exceptional Conditions

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

PT-2025-3323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the drm/sti component. The issue involves a potential dereference of error pointers, specifically with the crtc state...

PT-2025-25854

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the drm/amd/display component, where it's possible to generate more than 50 steps in hwss build fast...

PT-2025-3324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential dereference of error pointers in the sti gdp atomic check function has been resolved. The return value of drm atomic get crtc state needs to be checked to avoid use of the...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel that originates from the STI DRM driver not checking the return value of drmatomicgetcrtcstate when handling error pointers,...

CVE-2024-12438: Improper Neutralization of Input During Web Page Generation

The WooCommerce Digital Content Delivery incl. DRM – FlickRocket plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'startdate’ and 'enddate' parameters in all versions up to, and including, 4.75 due to insufficient input sanitization and output escaping. This makes it...

USN-7183-1 linux, linux-lts-xenial vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

PT-2025-55049

Уязвимость функции commit minimal transition based on current context модуля drivers/gpu/drm/amd/display/dc/core/dc.c драйвера поддержки инфраструктуры прямого рендеринга DRI видеокарт AMD ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимос...

SUSE CVE-2024-56667

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL pointer dereference in captureengine When the intelcontext structure contains NULL, it raises a NULL pointer dereference error in drminfo. cherry picked from commit 754302a5bc1bd8fd3b7d85c168b0a1af6d4bba4d...