CVE-2024-53200

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53200
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp This commit addresses a null pointer dereference issue in hwss_setup_dpp(). The issue could occur when pipe_ctx->plane_state is null. The fix adds a check to ensure `pipe_ctx->plane_state` is not null before accessing. This prevents a null pointer dereference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/020002c76147ecfdafe95c44abd3240e216b6316 Patch
https://git.kernel.org/stable/c/0dd3d1de7a5957804ccd58c1b252f9e34710e3f6 Patch
https://git.kernel.org/stable/c/2bc96c95070571c6c824e0d4c7783bee25a37876 Patch
https://git.kernel.org/stable/c/95792a18da0795300e15075ac05d1915e9066999 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Jan 2025, 21:29

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Se corrige la comprobación nula de pipe_ctx->plane_state en hwss_setup_dpp Esta confirmación soluciona un problema de desreferencia de puntero nulo en hwss_setup_dpp(). El problema podría ocurrir cuando pipe_ctx->plane_state es nulo. La corrección agrega una comprobación para garantizar que `pipe_ctx->plane_state` no sea nulo antes de acceder. Esto evita una desreferencia de puntero nulo.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/020002c76147ecfdafe95c44abd3240e216b6316 - () https://git.kernel.org/stable/c/020002c76147ecfdafe95c44abd3240e216b6316 - Patch
References () https://git.kernel.org/stable/c/0dd3d1de7a5957804ccd58c1b252f9e34710e3f6 - () https://git.kernel.org/stable/c/0dd3d1de7a5957804ccd58c1b252f9e34710e3f6 - Patch
References () https://git.kernel.org/stable/c/2bc96c95070571c6c824e0d4c7783bee25a37876 - () https://git.kernel.org/stable/c/2bc96c95070571c6c824e0d4c7783bee25a37876 - Patch
References () https://git.kernel.org/stable/c/95792a18da0795300e15075ac05d1915e9066999 - () https://git.kernel.org/stable/c/95792a18da0795300e15075ac05d1915e9066999 - Patch

27 Dec 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 14:15

Updated : 2025-01-08 21:29

NVD link : CVE-2024-53200

Mitre link : CVE-2024-53200

CVE.ORG link : CVE-2024-53200

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference