Riskcovery

CVE-2024-36897

drm/amd/display: Atom Integrated System Info v2_2 for DCN35

State
Published
Severity
5.5 Medium
Published
May 30, 2024
Updated
May 11, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Atom Integrated System Info v2_2 for DCN35

New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx->dc_bios->integrated_info while it was NULL.

DAL parses through the BIOS and extracts the necessary integrated_info but was missing a case for the new BIOS version 2.3.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3c7013a87124bab54216d9b99f77e8b6de6fbc1aAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 02f5300f6827206f6e48a77f51e6264993695e5cAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 7e3030774431eb093165a31baff040d35446fb8bAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c2797ec16d9072327e7578d09ee05bcab52fffd0Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 9a35d205f466501dcfe5625ca313d944d0ac2d60Affected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 5.15.159 through 5.15.*Not affected
  • 6.1.91 through 6.1.*Not affected
  • 6.6.31 through 6.6.*Not affected
  • 6.8.10 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.