Riskcovery

CVE-2024-36014

drm/arm/malidp: fix a possible null pointer dereference

State
Published
Severity
Not scored
Published
May 29, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/arm/malidp: fix a possible null pointer dereference

In malidp_mw_connector_reset, new memory is allocated with kzalloc, but no check is performed. In order to prevent null pointer dereferencing, ensure that mw_state is checked before calling __drm_atomic_helper_connector_reset.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before b6cc5dd06336ed8bb3a7a1fc5aaf7d5e88bc0818Affected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before 565d9ad7e5a18eb69ed8b66a9e9bb3f45346520cAffected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before a5fa5b40a278a3ca978fed64707bd27614adb1ebAffected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before 3e54d4e95120641216dfe91a6c49f116a9f68490Affected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before e4b52d49383306ef73fd1bd9102538beebb0fe07Affected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before 335cc45ef2b81b68be63c698b4f867a530bdf7a5Affected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before b77620730f614059db2470e8ebab3e725280fc6dAffected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before 93f76ec1eddce60dbb5885cbc0d7df54adee4639Affected
  • 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf to before a1f95aede6285dba6dd036d907196f35ae3a11eaAffected
LinuxLinux
  • 4.19Affected
  • before 4.19Not affected
  • 4.19.316 through 4.19.*Not affected
  • 5.4.278 through 5.4.*Not affected
  • 5.10.219 through 5.10.*Not affected
  • 5.15.161 through 5.15.*Not affected
  • 6.1.93 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.8.12 through 6.8.*Not affected
  • 6.9.3 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.