CVE-2024-41093

drm/amdgpu: avoid using null object of framebuffer

State: Published
Severity: Not scored
Published: Jul 29, 2024
Updated: May 11, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: avoid using null object of framebuffer

Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code when object is null to avoid using null object of framebuffer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 7f35e01cb0ea4d295f5c067bb5c67dfcddaf05bcAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6ce0544cabaa608018d5922ab404dc656a9d8447Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 330c8c1453848c04d335bad81371a66710210800Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before dd9ec0ea4cdde0fc48116e63969fc83e81d7ef46Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before bcfa48ff785bd121316592b131ff6531e3e696bbAffected
LinuxLinux	4.2Affected before 4.2Not affected 5.15.162 through 5.15.Not affected 6.1.97 through 6.1.Not affected 6.6.37 through 6.6.Not affected 6.9.8 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 7f35e01cb0ea4d295f5c067bb5c67dfcddaf05bcAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6ce0544cabaa608018d5922ab404dc656a9d8447Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 330c8c1453848c04d335bad81371a66710210800Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before dd9ec0ea4cdde0fc48116e63969fc83e81d7ef46Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before bcfa48ff785bd121316592b131ff6531e3e696bbAffected

LinuxLinux

4.2Affected
before 4.2Not affected
5.15.162 through 5.15.*Not affected
6.1.97 through 6.1.*Not affected
6.6.37 through 6.6.*Not affected
6.9.8 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.