CVE-2024-39498

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-39498
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-39498.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-39498
Downstream
Related
Published
2024-07-12T12:20:32Z
Modified
2025-10-17T07:39:26.688870Z
Summary
drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/mst: Fix NULL pointer dereference at drmdpaddpayloadpart2

[Why] Commit: - commit 5aa1dfcdf0a4 ("drm/mst: Refactor the flow for payload allocation/removement") accidently overwrite the commit - commit 54d217406afe ("drm: use mgr->dev in drmdbgkms in drmdpaddpayloadpart2") which cause regression.

[How] Recover the original NULL fix and remove the unnecessary input parameter 'state' for drmdpaddpayloadpart2().

(cherry picked from commit 4545614c1d8da603e57b60dd66224d81b6ffc305)

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5aa1dfcdf0a429e4941e2eef75b006a8c7a8ac49
Fixed
8e21de5f99b2368a5155037ce0aae8aaba3f5241
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5aa1dfcdf0a429e4941e2eef75b006a8c7a8ac49
Fixed
5a507b7d2be15fddb95bf8dee01110b723e2bcd9

Affected versions

v6.*

v6.5
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5

Database specific

vanir_signatures

[
    {
        "digest": {
            "function_hash": "153759613748724368162248616503100802775",
            "length": 560.0
        },
        "id": "CVE-2024-39498-0655b241",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "drm_dp_add_payload_part2",
            "file": "drivers/gpu/drm/display/drm_dp_mst_topology.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "303720168597288170631514372657115694319",
            "length": 1601.0
        },
        "id": "CVE-2024-39498-1305884d",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "intel_mst_enable_dp",
            "file": "drivers/gpu/drm/i915/display/intel_dp_mst.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "117796945745189205079214251163273211618",
                "335915146588704739086591997140801352062",
                "48242176835634826865711596925358719532",
                "287992199199684160477430213334051372223"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-18712f96",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "include/drm/display/drm_dp_mst_helper.h"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "line_hashes": [
                "66897123582090305659693927325803334414",
                "313930502401347744810986808051503987038",
                "190303915979255602438811370683660289663",
                "222021116201235428156075016777554560588"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-1b2f7735",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/nouveau/dispnv50/disp.c"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "29763690956854545913337007539791230087",
            "length": 777.0
        },
        "id": "CVE-2024-39498-1d42689b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "nv50_msto_cleanup",
            "file": "drivers/gpu/drm/nouveau/dispnv50/disp.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "29763690956854545913337007539791230087",
            "length": 777.0
        },
        "id": "CVE-2024-39498-283daea8",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "nv50_msto_cleanup",
            "file": "drivers/gpu/drm/nouveau/dispnv50/disp.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "38720546584708009032235829872577226587",
                "224642976921844106497322721777458023304",
                "29275918333489928846168624849480337198",
                "134800638185313584183198802566604476145"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-623fb918",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/i915/display/intel_dp_mst.c"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "line_hashes": [
                "38720546584708009032235829872577226587",
                "224642976921844106497322721777458023304",
                "29275918333489928846168624849480337198",
                "134800638185313584183198802566604476145"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-71a698f7",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/i915/display/intel_dp_mst.c"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "line_hashes": [
                "294694347453453309542122059431037055835",
                "48298822894008802464820172094459876379",
                "152878231201772084302506522238536454152",
                "322913072403689731521342450883940087451"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-8127e0f8",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "186447761459665147426302169457741488576",
            "length": 648.0
        },
        "id": "CVE-2024-39498-849d4b46",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "dm_helpers_dp_mst_send_payload_allocation",
            "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "186447761459665147426302169457741488576",
            "length": 648.0
        },
        "id": "CVE-2024-39498-92c0432f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "dm_helpers_dp_mst_send_payload_allocation",
            "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "117796945745189205079214251163273211618",
                "335915146588704739086591997140801352062",
                "48242176835634826865711596925358719532",
                "287992199199684160477430213334051372223"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-c46af8db",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "include/drm/display/drm_dp_mst_helper.h"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "line_hashes": [
                "269427828070908290688175237023031895181",
                "82287980440713367283478703977410490897",
                "80872502983372807385272665925643889645",
                "13839625045181153837431394022167171660",
                "52107114013687330201415809510003336977",
                "132984167338969194345878998239614713246",
                "233269106899189945272054864432755385775",
                "17894278596606520799710166822753794701",
                "82996421785433790994705590683842074414",
                "86406574243257092406261307344285003870"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-d0fd80bd",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/display/drm_dp_mst_topology.c"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "189342930271590589104684514287347675964",
            "length": 1413.0
        },
        "id": "CVE-2024-39498-d82556be",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "intel_mst_enable_dp",
            "file": "drivers/gpu/drm/i915/display/intel_dp_mst.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "269427828070908290688175237023031895181",
                "82287980440713367283478703977410490897",
                "80872502983372807385272665925643889645",
                "13839625045181153837431394022167171660",
                "52107114013687330201415809510003336977",
                "132984167338969194345878998239614713246",
                "233269106899189945272054864432755385775",
                "17894278596606520799710166822753794701",
                "82996421785433790994705590683842074414",
                "86406574243257092406261307344285003870"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-ddaeaada",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/display/drm_dp_mst_topology.c"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "line_hashes": [
                "66897123582090305659693927325803334414",
                "313930502401347744810986808051503987038",
                "190303915979255602438811370683660289663",
                "222021116201235428156075016777554560588"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-e031aed6",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/nouveau/dispnv50/disp.c"
        },
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "153759613748724368162248616503100802775",
            "length": 560.0
        },
        "id": "CVE-2024-39498-e166d263",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a507b7d2be15fddb95bf8dee01110b723e2bcd9",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "drm_dp_add_payload_part2",
            "file": "drivers/gpu/drm/display/drm_dp_mst_topology.c"
        },
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "294694347453453309542122059431037055835",
                "48298822894008802464820172094459876379",
                "152878231201772084302506522238536454152",
                "322913072403689731521342450883940087451"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-39498-e76e121f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e21de5f99b2368a5155037ce0aae8aaba3f5241",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c"
        },
        "signature_type": "Line"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.6