CVE-2024-49913

drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream

This commit addresses a null pointer dereference issue in the `commit_planes_for_stream` function at line 4140. The issue could occur when `top_pipe_to_program` is null.

The fix adds a check to ensure `top_pipe_to_program` is not null before accessing its stream_res. This prevents a null pointer dereference.

Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/core/dc.c:4140 commit_planes_for_stream() error: we previously assumed 'top_pipe_to_program' could be null (see line 3906)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 1ebfa6663807c144be8c8b6727375012409d2356Affected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 8ab59527852a6f7780aad6185729550ca0569122Affected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 40193ff73630adf76bc0d82398f7d90fb576dba4Affected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before e47e563c6f0db7d792a559301862c19ead0dfc2fAffected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3929e382e4758aff42da0102a60d13337c99d3b8Affected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 73efd2a611b62fee71a7b7f27d9d08bb60da8a72Affected 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 66d71a72539e173a9b00ca0b1852cbaa5f5bf1adAffected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 1ebfa6663807c144be8c8b6727375012409d2356Affected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 8ab59527852a6f7780aad6185729550ca0569122Affected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 40193ff73630adf76bc0d82398f7d90fb576dba4Affected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before e47e563c6f0db7d792a559301862c19ead0dfc2fAffected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3929e382e4758aff42da0102a60d13337c99d3b8Affected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 73efd2a611b62fee71a7b7f27d9d08bb60da8a72Affected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 66d71a72539e173a9b00ca0b1852cbaa5f5bf1adAffected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.10.14 through 6.10.*Not affected
6.11.3 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.