CVE-2024-53115

drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle

State: Published
Severity: 5.5 Medium
Published: Dec 2, 2024
Updated: May 23, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle

The 'vmw_user_object_buffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the vmw_framebuffer_surface_create_handle.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	d6667f0ddf46c671d379cd5fe66ce0a54d2a743a to before 36f64da080555175b58d85f99f5f90435e274e56Affected d6667f0ddf46c671d379cd5fe66ce0a54d2a743a to before 93d1f41a82de382845af460bf03bcb17dcbf08c5Affected af6441e6f3d41e95bfc5bfc11960c259bb4f0f11Affected 6.10.4 to before 6.11Affected
LinuxLinux	6.11Affected before 6.11Not affected 6.11.10 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.