CVE-2024-53201

drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

State
Published
Severity
5.5 Medium
Published
Dec 27, 2024
Updated
Oct 30, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

This commit addresses a null pointer dereference issue in dcn20_program_pipe(). Previously, commit 8e4ed3cf1642 ("drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe") partially fixed the null pointer dereference issue. However, in dcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and plane_state is accessed again through pipe_ctx. Multiple if statements directly call attributes of plane_state, leading to potential null pointer dereference issues. This patch adds necessary null checks to ensure stability.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 21c613e1c6ae45bb29ebc156d22060f034cc5665 to before 82f7058ce05c1fad8573950c50bb5befafe7e787Affected
  • 68f75e6f08aad66069a629db8d7840919156c761 to before 0335fb698ab0415d87650bc7a0f465c563ddec7dAffected
  • 65a6fee22d5cfa645cb05489892dc9cd3d142fc2 to before 6b4ee2560d4d8de2688da68cd9581177035e0876Affected
  • 8e4ed3cf1642df0c4456443d865cff61a9598aa8 to before 3609259326171cd5b98462636580fb2ae5c87d40Affected
  • 8e4ed3cf1642df0c4456443d865cff61a9598aa8 to before 6a057072ddd127255350357dd880903e8fa23f36Affected
  • 6.6.64 to before 6.6.160Affected
  • 6.11.3 to before 6.11.11Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.