CVE-2024-27041

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27041
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini() Since 'adev->dm.dc' in amdgpu_dm_fini() might turn out to be NULL before the call to dc_enable_dmub_notifications(), check beforehand to ensure there will not be a possible NULL-ptr-deref there. Also, since commit 1e88eb1b2c25 ("drm/amd/display: Drop CONFIG_DRM_AMD_DC_HDCP") there are two separate checks for NULL in 'adev->dm.dc' before dc_deinit_callbacks() and dc_dmub_srv_destroy(). Clean up by combining them all under one 'if'. Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b Patch
https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c Patch
https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957 Patch
https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811 Patch
https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b Patch
https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c Patch
https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957 Patch
https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Apr 2025, 18:38

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b - () https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b - Patch
References () https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c - () https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c - Patch
References () https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957 - () https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957 - Patch
References () https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811 - () https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811 - Patch

21 Nov 2024, 09:03

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b - () https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b -
References () https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c - () https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c -
References () https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957 - () https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957 -
References () https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811 - () https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811 -

01 Nov 2024, 16:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: corrige comprobaciones NULL para adev->dm.dc en amdgpu_dm_fini() Dado que 'adev->dm.dc' en amdgpu_dm_fini() podría resultar ser NULL antes de llamar a dc_enable_dmub_notifications(), verifique de antemano para asegurarse de que no habrá un posible NULL-ptr-deref allí. Además, desde la confirmación 1e88eb1b2c25 ("drm/amd/display: Drop CONFIG_DRM_AMD_DC_HDCP") hay dos comprobaciones separadas para NULL en 'adev->dm.dc' antes de dc_deinit_callbacks() y dc_dmub_srv_destroy(). Limpia combinándolos todos bajo un solo "si". Encontrado por el Centro de verificación de Linux (linuxtesting.org) con la herramienta de análisis estático SVACE.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2025-04-08 18:38

NVD link : CVE-2024-27041

Mitre link : CVE-2024-27041

CVE.ORG link : CVE-2024-27041

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference