CVE-2024-50117

drm/amd: Guard against bad data for ATIF ACPI method

State: Published
Severity: 7.3 High
Published: Nov 5, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd: Guard against bad data for ATIF ACPI method

If a BIOS provides bad data in response to an ATIF method call this causes a NULL pointer dereference in the caller.

``` ? show_regs (arch/x86/kernel/dumpstack.c:478 (discriminator 1)) ? __die (arch/x86/kernel/dumpstack.c:423 arch/x86/kernel/dumpstack.c:434) ? page_fault_oops (arch/x86/mm/fault.c:544 (discriminator 2) arch/x86/mm/fault.c:705 (discriminator 2)) ? do_user_addr_fault (arch/x86/mm/fault.c:440 (discriminator 1) arch/x86/mm/fault.c:1232 (discriminator 1)) ? acpi_ut_update_object_reference (drivers/acpi/acpica/utdelete.c:642) ? exc_page_fault (arch/x86/mm/fault.c:1542) ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:387 (discriminator 2)) amdgpu ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:386 (discriminator 1)) amdgpu ```

It has been encountered on at least one system, so guard for it.

(cherry picked from commit c9b7c809b89f24e9372a4e7f02d64c950b07fdee)

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 58556dcbd5606a5daccaee73b2130bc16b48e025Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 43b4fa6e0e238c6e2662f4fb61d9f51c2785fb1dAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 234682910971732cd4da96fd95946e296e486b38Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6032287747f874b52dc8b9d7490e2799736e035fAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before cd67af3c1762de4c2483ae4dbdd98f9ea8fa56e3Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 975ede2a7bec52b5da1428829b3439667c8a234bAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 1d7175f9c57b1abf9ecfbdfd53ea760761f52ffeAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before bf58f03931fdcf7b3c45cb76ac13244477a60f44Affected
LinuxLinux	4.2Affected before 4.2Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.170 through 5.15.Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 58556dcbd5606a5daccaee73b2130bc16b48e025Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 43b4fa6e0e238c6e2662f4fb61d9f51c2785fb1dAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 234682910971732cd4da96fd95946e296e486b38Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6032287747f874b52dc8b9d7490e2799736e035fAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before cd67af3c1762de4c2483ae4dbdd98f9ea8fa56e3Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 975ede2a7bec52b5da1428829b3439667c8a234bAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 1d7175f9c57b1abf9ecfbdfd53ea760761f52ffeAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before bf58f03931fdcf7b3c45cb76ac13244477a60f44Affected

LinuxLinux

4.2Affected
before 4.2Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.170 through 5.15.*Not affected
6.1.115 through 6.1.*Not affected
6.6.59 through 6.6.*Not affected
6.11.6 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.