CVE-2024-49897

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49897
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check phantom_stream before it is used dcn32_enable_phantom_stream can return null, so returned value must be checked before used. This fixes 1 NULL_RETURNS issue reported by Coverity.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1decf695ce08e23d9ded6ce83d121b2282ce9899 Patch
https://git.kernel.org/stable/c/3718a619a8c0a53152e76bb6769b6c414e1e83f4 Patch
https://git.kernel.org/stable/c/3ba1219e299ab5462b5cb374c2fa2a67af0ea190 Patch
https://git.kernel.org/stable/c/d247af7c5dbf143ad6be8179bb1550e76d6af57e
https://git.kernel.org/stable/c/db1d7e1794fed62ee16d6a72a85997bb069e2e27
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Nov 2025, 21:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html -

14 Dec 2024, 21:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/db1d7e1794fed62ee16d6a72a85997bb069e2e27 -

09 Dec 2024, 13:10

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/d247af7c5dbf143ad6be8179bb1550e76d6af57e -

01 Nov 2024, 14:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
References () https://git.kernel.org/stable/c/1decf695ce08e23d9ded6ce83d121b2282ce9899 - () https://git.kernel.org/stable/c/1decf695ce08e23d9ded6ce83d121b2282ce9899 - Patch
References () https://git.kernel.org/stable/c/3718a619a8c0a53152e76bb6769b6c414e1e83f4 - () https://git.kernel.org/stable/c/3718a619a8c0a53152e76bb6769b6c414e1e83f4 - Patch
References () https://git.kernel.org/stable/c/3ba1219e299ab5462b5cb374c2fa2a67af0ea190 - () https://git.kernel.org/stable/c/3ba1219e299ab5462b5cb374c2fa2a67af0ea190 - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: comprobar phantom_stream antes de usarlo dcn32_enable_phantom_stream puede devolver un valor nulo, por lo que se debe comprobar el valor devuelto antes de usarlo. Esto soluciona 1 problema de NULL_RETURNS informado por Coverity.

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2025-11-03 21:16

NVD link : CVE-2024-49897

Mitre link : CVE-2024-49897

CVE.ORG link : CVE-2024-49897

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference