drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe (Linux Linux)

CVE-2024-53201
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.26 % · centile 18 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe This commit addresses a null pointer dereference issue in dcn20_program_pipe(). Previously, commit 8e4ed3cf1642 ("drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe") partially fixed the null pointer dereference issue. However, in dcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and plane_state is accessed again through pipe_ctx. Multiple if statements directly call attributes of plane_state, leading to potential null pointer dereference issues. This patch adds necessary null checks to ensure stability.

Faiblesses (CWE)

  • CWE-476 — Déréférencement de pointeur nul

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 21c613e1c6ae45bb29ebc156d22060f034cc5665 < 82f7058ce05c1fad8573950c50bb5befafe7e787 ; affected 68f75e6f08aad66069a629db8d7840919156c761 < 0335fb698ab0415d87650bc7a0f465c563ddec7d ; affected 65a6fee22d5cfa645cb05489892dc9cd3d142fc2 < 6b4ee2560d4d8de2688da68cd9581177035e0876 ; affected 8e4ed3cf1642df0c4456443d865cff61a9598aa8 < 3609259326171cd5b98462636580fb2ae5c87d40 ; affected 8e4ed3cf1642df0c4456443d865cff61a9598aa8 < 6a057072ddd127255350357dd880903e8fa23f36 ; affected 6.6.64 < 6.6.160
Linux · Linuxaffected 6.12 ; unaffected 0 < 6.12 ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.11.11 ≤ 6.11.* ; unaffected 6.12.2 ≤ 6.12.* ; unaffected 6.13 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD