CVE-2024-49905

drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)

This commit adds a null check for the 'afb' variable in the amdgpu_dm_plane_handle_cursor_update function. Previously, 'afb' was assumed to be null, but was used later in the code without a null check. This could potentially lead to a null pointer dereference.

Changes since v1: - Moved the null check for 'afb' to the line where 'afb' is used. (Alex)

Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_plane.c:1298 amdgpu_dm_plane_handle_cursor_update() error: we previously assumed 'afb' could be null (see line 1252)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bd0e24e5e608ccb9fdda300bb974496d6d8cf57dAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 75839e2365b666ff4e1b9047e442cab138eac4f6Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 9132882eaae4d21d2fc5843b3308379a481ebdf0Affected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before e4e26cbe34d7c1c1db5fb7b3101573c29866439fAffected
  • 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before cd9e9e0852d501f169aa3bb34e4b413d2eb48c37Affected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.