CVE-2024-42310

drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes

State
Published
Severity
Not scored
Published
Aug 17, 2024
Updated
May 11, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes

In cdv_intel_lvds_get_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before f392c36cebf4c1d6997a4cc2c0f205254acef42aAffected
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before a658ae2173ab74667c009e2550455e6de5b33ddcAffected
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before b6ac46a00188cde50ffba233e6efb366354a1de5Affected
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before 08f45102c81ad8bc9f85f7a25e9f64e128edb87dAffected
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before e74eb5e8089427c8c49e0dd5067e5f39ce3a4d56Affected
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before 2d209b2f862f6b8bff549ede541590a8d119da23Affected
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before 977ee4fe895e1729cd36cc26916bbb10084713d6Affected
  • 6a227d5fd6c4abe6a9226a40f6981825e9da5fbe to before cb520c3f366c77e8d69e4e2e2781a8ce48d98e79Affected
LinuxLinux
  • 3.3Affected
  • before 3.3Not affected
  • 4.19.320 through 4.19.*Not affected
  • 5.4.282 through 5.4.*Not affected
  • 5.10.224 through 5.10.*Not affected
  • 5.15.165 through 5.15.*Not affected
  • 6.1.103 through 6.1.*Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.