Log in Start free

Vulnerability · Published May 1, 2024 · Assigned by Linux

CVE-2024-27041drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 80.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini() Since 'adev->dm.dc' in amdgpu_dm_fini() might turn out to be NULL before the call to dc_enable_dmub_notifications(), check beforehand to ensure there will not be a possible NULL-ptr-deref there. Also, since commit 1e88eb1b2c25 ("drm/amd/display: Drop CONFIG_DRM_AMD_DC_HDCP") there are two separate checks for NULL in 'adev->dm.dc' before dc_deinit_callbacks() and dc_dmub_srv_destroy(). Clean up by combining them all under one 'if'. Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2024-27041
Debian:13linux6.7.12-1DEBIAN-CVE-2024-27041
Debian:14linux6.7.12-1DEBIAN-CVE-2024-27041
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux6.8.0-35.35UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-aws6.8.0-1009.9UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-azure6.8.0-1008.8UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-gcp6.8.0-1008.9UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-gke6.8.0-1004.7UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-ibm6.8.0-1006.6UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-35.35.1UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1006.6UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-oracle6.8.0-1006.6UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-raspi6.8.0-1005.5UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-27041
Ubuntu:24.04:LTSlinux-riscv6.8.0-35.35.1UBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-27041
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2024-27041

Affected products (as reported)

VendorProductVersions
Linux Linux 81927e2808be5adace93c2012d45d6938d3a7aa0 – before cef0f2fe65ccee638e48fd5c1d590a3c0539acdd81927e2808be5adace93c2012d45d6938d3a7aa0 – before e040f1fbe9abae91b12b074cfc3bbb5367b7981181927e2808be5adace93c2012d45d6938d3a7aa0 – before ca2eb375db76fd50f31afdd67d6ca4f83325495781927e2808be5adace93c2012d45d6938d3a7aa0 – before 1c62697e4086de988b31124fb8c79c244ea05f2b81927e2808be5adace93c2012d45d6938d3a7aa0 – before 2a3cfb9a24a28da9cc13d2c525a76548865e182c
Linux Linux 5.14

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References