Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-43904
HistoryAug 26, 2024 - 12:00 a.m.

CVE-2024-43904

2024-08-2600:00:00
ubuntu.com
ubuntu.com
6
linux kernel
vulnerability
fix
null pointer
dereference
drm/amd/display

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null checks for ‘stream’ and ‘plane’ before
dereferencing
This commit adds null checks for the ‘stream’ and ‘plane’ variables in
the dcn30_apply_idle_power_optimizations function. These variables were
previously assumed to be null at line 922, but they were used later in
the code without checking if they were null. This could potentially lead
to a null pointer dereference, which would cause a crash.
The null checks ensure that ‘stream’ and ‘plane’ are not null before
they are used, preventing potential crashes.
Fixes the below static smatch checker:
drivers/gpu/drm/amd/amdgpu/…/display/dc/hwss/dcn30/dcn30_hwseq.c:938
dcn30_apply_idle_power_optimizations() error: we previously assumed
‘stream’ could be null (see line 922)
drivers/gpu/drm/amd/amdgpu/…/display/dc/hwss/dcn30/dcn30_hwseq.c:940
dcn30_apply_idle_power_optimizations() error: we previously assumed ‘plane’
could be null (see line 922)

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High