CVE-2024-26661
MEDIUM severity · CVSS 5.5 · CWE-476
5.5CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' In "u32 otg_inst = pipe_ctx->stream_res.tg->inst;" pipe_ctx->stream_res.tg could be NULL, it is relying on the caller to ensure the tg is not NULL.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/39f24c08363af1cd945abad84e3c87fd3e3c845a ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/39f24c08363af1cd945abad84e3c87fd3e3c845aPatch
- https://git.kernel.org/stable/c/3f3c237a706580326d3b7a1b97697e5031ca4667Patch
- https://git.kernel.org/stable/c/66951d98d9bf45ba25acf37fe0747253fafdf298Patch
- https://git.kernel.org/stable/c/e3bc103045c51271c3e7a808efb187a354678b7d