Riskcovery

CVE-2024-27041

drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()

State
Published
Severity
5.5 Medium
Published
May 1, 2024
Updated
Oct 30, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()

Since 'adev->dm.dc' in amdgpu_dm_fini() might turn out to be NULL before the call to dc_enable_dmub_notifications(), check beforehand to ensure there will not be a possible NULL-ptr-deref there.

Also, since commit 1e88eb1b2c25 ("drm/amd/display: Drop CONFIG_DRM_AMD_DC_HDCP") there are two separate checks for NULL in 'adev->dm.dc' before dc_deinit_callbacks() and dc_dmub_srv_destroy(). Clean up by combining them all under one 'if'.

Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 81927e2808be5adace93c2012d45d6938d3a7aa0 to before cef0f2fe65ccee638e48fd5c1d590a3c0539acddAffected
  • 81927e2808be5adace93c2012d45d6938d3a7aa0 to before e040f1fbe9abae91b12b074cfc3bbb5367b79811Affected
  • 81927e2808be5adace93c2012d45d6938d3a7aa0 to before ca2eb375db76fd50f31afdd67d6ca4f833254957Affected
  • 81927e2808be5adace93c2012d45d6938d3a7aa0 to before 1c62697e4086de988b31124fb8c79c244ea05f2bAffected
  • 81927e2808be5adace93c2012d45d6938d3a7aa0 to before 2a3cfb9a24a28da9cc13d2c525a76548865e182cAffected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.