Riskcovery

CVE-2024-49898

drm/amd/display: Check null-initialized variables

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check null-initialized variables

[WHAT & HOW] drr_timing and subvp_pipe are initialized to null and they are not always assigned new values. It is necessary to check for null before dereferencing.

This fixes 2 FORWARD_NULL issues reported by Coverity.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 26d262b79a3587aaa84368586a55e9026c67841bAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c3a3b6d9a9383e3c1a4a08878ba5046e68647595Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3fc70ae048fe0936761b73b50700a810ff61e853Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 115b1a3b0944b4d8ef0b4b0c5a625bdd9474131fAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 367cd9ceba1933b63bc1d87d967baf6d9fd241d2Affected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.1.120 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.