CVE-2024-41089

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes

State: Published
Severity: Not scored
Published: Jul 29, 2024
Updated: May 11, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes

In nv17_tv_get_hd_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). The same applies to drm_cvt_mode(). Add a check to avoid null pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before ffabad4aa91e33ced3c6ae793fb37771b3e9cb51Affected 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 1c9f2e60150b4f13789064370e37f39e6e060f50Affected 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 56fc4d3b0bdef691831cd95715a7ca3ebea98b2dAffected 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 5eecb49a6c268dc229005bf6e8167d4001dc09a0Affected 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 30cbf6ffafbbdd8a6e4e5f0a2e9a9827ee83f3adAffected 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 7ece609b0ce7a7ea8acdf512a77d1fee26621637Affected 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 6e49a157d541e7e97b815a56f4bdfcbc89844a59Affected 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 6d411c8ccc0137a612e0044489030a194ff5c843Affected
LinuxLinux	2.6.33Affected before 2.6.33Not affected 4.19.317 through 4.19.Not affected 5.4.279 through 5.4.Not affected 5.10.221 through 5.10.Not affected 5.15.162 through 5.15.Not affected 6.1.97 through 6.1.Not affected 6.6.37 through 6.6.Not affected 6.9.8 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before ffabad4aa91e33ced3c6ae793fb37771b3e9cb51Affected
6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 1c9f2e60150b4f13789064370e37f39e6e060f50Affected
6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 56fc4d3b0bdef691831cd95715a7ca3ebea98b2dAffected
6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 5eecb49a6c268dc229005bf6e8167d4001dc09a0Affected
6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 30cbf6ffafbbdd8a6e4e5f0a2e9a9827ee83f3adAffected
6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 7ece609b0ce7a7ea8acdf512a77d1fee26621637Affected
6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 6e49a157d541e7e97b815a56f4bdfcbc89844a59Affected
6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 6d411c8ccc0137a612e0044489030a194ff5c843Affected

LinuxLinux

2.6.33Affected
before 2.6.33Not affected
4.19.317 through 4.19.*Not affected
5.4.279 through 5.4.*Not affected
5.10.221 through 5.10.*Not affected
5.15.162 through 5.15.*Not affected
6.1.97 through 6.1.*Not affected
6.6.37 through 6.6.*Not affected
6.9.8 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.