CVE-2024-27040

drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'

State
Published
Severity
4.7 Medium
Published
May 1, 2024
Updated
May 11, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'

In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling replay->funcs->replay_set_power_opt().

if (replay == NULL && force_static) return false;

...

if (link->replay_settings.replay_feature_enabled && replay->funcs->replay_set_power_opt) { replay->funcs->replay_set_power_opt(replay, *power_opts, panel_inst); link->replay_settings.replay_power_opt_active = *power_opts; }

If 'replay' is NULL, this will cause a null pointer dereference.

Fixes the below found by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/link/protocols/link_edp_panel_control.c:895 edp_set_replay_allow_active() error: we previously assumed 'replay' could be null (see line 887)

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c7ddc0a800bc9f681a18c3bdd9f06b61adfabc11 to before f610c46771ef1047e46d61807aa7c69cd29e63d8Affected
  • c7ddc0a800bc9f681a18c3bdd9f06b61adfabc11 to before e7cadd5d3a8ffe334d0229ba9eda4290138d56e7Affected
  • c7ddc0a800bc9f681a18c3bdd9f06b61adfabc11 to before d0e94f4807ff0df66cf447d6b4bbb8ac830e99c3Affected
  • c7ddc0a800bc9f681a18c3bdd9f06b61adfabc11 to before f6aed043ee5d75b3d1bfc452b1a9584b63c8f76bAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.