CVE-2024-26661

drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'

State: Published
Severity: 5.5 Medium
Published: Apr 2, 2024
Updated: Oct 30, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'

In "u32 otg_inst = pipe_ctx->stream_res.tg->inst;" pipe_ctx->stream_res.tg could be NULL, it is relying on the caller to ensure the tg is not NULL.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	474ac4a875ca6fea3fc5183d3ad22ef7523dca53 to before e3bc103045c51271c3e7a808efb187a354678b7dAffected 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 to before 3f3c237a706580326d3b7a1b97697e5031ca4667Affected 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 to before 39f24c08363af1cd945abad84e3c87fd3e3c845aAffected 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 to before 66951d98d9bf45ba25acf37fe0747253fafdf298Affected
LinuxLinux	5.9Affected before 5.9Not affected 6.1.191 through 6.1.Not affected 6.6.17 through 6.6.Not affected 6.7.5 through 6.7.*Not affected 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.