CVE-2024-26672
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-26672
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26672.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-26672
- Downstream
- Published
- 2024-04-02T06:49:14Z
- Modified
- 2025-10-16T20:23:22.817455Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix variable 'mcafuncs' dereferenced before NULL check in 'amdgpumcasmugetmcaentry()'
Fixes the below:
drivers/gpu/drm/amd/amdgpu/amdgpumca.c:377 amdgpumcasmugetmcaentry() warn: variable dereferenced before check 'mca_funcs' (see line 368)
357 int amdgpumcasmugetmcaentry(struct amdgpudevice *adev, enum amdgpumcaerrortype type, 358 int idx, struct mcabankentry *entry) 359 { 360 const struct amdgpumcasmufuncs *mcafuncs = adev->mca.mcafuncs; 361 int count; 362 363 switch (type) { 364 case AMDGPUMCAERRORTYPEUE: 365 count = mcafuncs->maxue_count;
mca_funcs is dereferenced here.
366 break; 367 case AMDGPUMCAERRORTYPECE: 368 count = mcafuncs->maxce_count;
mca_funcs is dereferenced here.
369 break; 370 default: 371 return -EINVAL; 372 } 373 374 if (idx >= count) 375 return -EINVAL; 376 377 if (mcafuncs && mcafuncs->mcagetmca_entry) ^^^^^^^^^
Checked too late!
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedd38ceaf99ed015f2a0b9af3499791bd3a3daae21Fixed7b5d58c07024516c0e81b95e98f37710cf402c53
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedd38ceaf99ed015f2a0b9af3499791bd3a3daae21Fixed4f32504a2f85a7b40fe149436881381f48e9c0c0