5.5

CVE-2024-46694

drm/amd/display: avoid using null object of framebuffer

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: avoid using null object of framebuffer

Instead of using state->fb->obj[0] directly, get object from framebuffer
by calling drm_gem_fb_get_obj() and return error code when object is
null to avoid using null object of framebuffer.

(cherry picked from commit 73dd0ad9e5dad53766ea3e631303430116f834b3)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.0 < 6.1.108
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.49
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.8
Linux ≫ Linux Kernel Version 6.11 Update rc1
Linux ≫ Linux Kernel Version 6.11 Update rc2
Linux ≫ Linux Kernel Version 6.11 Update rc3
Linux ≫ Linux Kernel Version 6.11 Update rc4
Linux ≫ Linux Kernel Version 6.11 Update rc5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.133
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/093ee72ed35c2338c87c26b6ba6f0b7789c9e14e
Patch
https://git.kernel.org/stable/c/3b9a33235c773c7a3768060cf1d2cf8a9153bc37
Patch
https://git.kernel.org/stable/c/49e1b214f3239b78967c6ddb8f8ec47ae047b051
Patch
https://git.kernel.org/stable/c/f6f5e39a3fe7cbdba190f42b28b40bdff03c8cf0
Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html