Vulnerability · Published Aug 26, 2024 · Assigned by Linux

CVE-2024-43904drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 85.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and 'plane' variables in the dcn30_apply_idle_power_optimizations function. These variables were previously assumed to be null at line 922, but they were used later in the code without checking if they were null. This could potentially lead to a null pointer dereference, which would cause a crash. The null checks ensure that 'stream' and 'plane' are not null before they are used, preventing potential crashes. Fixes the below static smatch checker: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c:938 dcn30_apply_idle_power_optimizations() error: we previously assumed 'stream' could be null (see line 922) drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c:940 dcn30_apply_idle_power_optimizations() error: we previously assumed 'plane' could be null (see line 922)

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.119-1DEBIAN-CVE-2024-43904
Debian:12linux6.1.119-1DSA-5818-1
Debian:13linux6.10.6-1DEBIAN-CVE-2024-43904
Debian:14linux6.10.6-1DEBIAN-CVE-2024-43904
Ubuntu:22.04:LTSlinux5.15.0-130.140UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux5.15.0-130.140USN-7179-1
Ubuntu:24.04:LTSlinux6.8.0-50.51UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-aws5.15.0-1076.83USN-7179-2
Ubuntu:22.04:LTSlinux-aws5.15.0-1076.83UBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-aws6.8.0-1020.22UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1020.22~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure5.15.0-1078.87UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure5.15.0-1078.87USN-7186-2
Ubuntu:24.04:LTSlinux-azure6.8.0-1020.23UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1020.23~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1078.87.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gcp5.15.0-1074.83UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gcp5.15.0-1074.83USN-7179-2
Ubuntu:24.04:LTSlinux-gcp6.8.0-1019.21UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1019.21~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gke5.15.0-1072.78USN-7179-3
Ubuntu:22.04:LTSlinux-gke5.15.0-1072.78UBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-gke6.8.0-1015.19UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1057.64USN-7179-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1057.64UBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-50.51~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-ibm5.15.0-1067.70UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-ibm5.15.0-1067.70USN-7179-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1017.17UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1017.17~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1071.77USN-7186-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1071.77UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-kvm5.15.0-1071.76USN-7179-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1071.76UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-128.138UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-128.138USN-7179-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-50.51.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-50.51.1~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1070.71USN-7179-2
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1070.71UBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1019.21UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1019.21~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1019.21.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1032.32UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1020.20UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1018.18UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-oracle5.15.0-1073.79USN-7179-2
Ubuntu:22.04:LTSlinux-oracle5.15.0-1073.79UBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-oracle6.8.0-1017.18UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1017.18~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-raspi5.15.0-1070.73UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-raspi5.15.0-1070.73USN-7179-2
Ubuntu:24.04:LTSlinux-raspi6.8.0-1016.18UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-riscv6.8.0-50.51.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-50.51.1~22.04.1UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-43904
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2024-43904
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1041.45USN-7179-4
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1041.45UBUNTU-CVE-2024-43904

Affected products (as reported)

VendorProductVersions
Linux Linux 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c – before fcf9d6a9f30ea414b6b84a6e901cebd44e1468474562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c – before 5e84eda48ffb2363437db44bbd0235594f8a58f94562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c – before 10c20d79d59cadfe572480d98cec271a89ffb0244562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c – before 16a8a2a839d19c4cf7253642b493ffb8eee1d8574562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c – before 15c2990e0f0108b9c3752d7072a97d45d4283aea
Linux Linux 4.15

References