CVE-2024-41095

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes

State
Published
Severity
Not scored
Published
Jul 29, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes

In nv17_tv_get_ld_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 9289cd3450d1da3e271ef4b054d4d2932c41243eAffected
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before dbd75f32252508ed6c46c3288a282c301a57ceebAffected
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 259549b2ccf795b7f91f7b5aba47286addcfa389Affected
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 0d17604f2e44b3df21e218fe8fb3b836d41bac49Affected
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before f95ed0f54b3d3faecae1140ddab854f904a6e7c8Affected
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before cb751e48bbcffd292090f7882b23b215111b3d72Affected
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before bdda5072494f2a7215d94fc4124ad1949a218714Affected
  • 6ee738610f41b59733f63718f0bdbcba7d3a3f12 to before 66edf3fb331b6c55439b10f9862987b0916b3726Affected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 4.19.317 through 4.19.*Not affected
  • 5.4.279 through 5.4.*Not affected
  • 5.10.221 through 5.10.*Not affected
  • 5.15.162 through 5.15.*Not affected
  • 6.1.97 through 6.1.*Not affected
  • 6.6.37 through 6.6.*Not affected
  • 6.9.8 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.