CVE-2024-41089

Source
https://cve.org/CVERecord?id=CVE-2024-41089
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41089.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-41089
Downstream
Related
Published
2024-07-29T15:48:04.875Z
Modified
2026-05-07T04:15:34.713473Z
Summary
drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes

In nv17tvgethdmodes(), the return value of drmmodeduplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drmmodeduplicate(). The same applies to drmcvtmode(). Add a check to avoid null pointer dereference.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41089.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6ee738610f41b59733f63718f0bdbcba7d3a3f12
Fixed
ffabad4aa91e33ced3c6ae793fb37771b3e9cb51
Fixed
1c9f2e60150b4f13789064370e37f39e6e060f50
Fixed
56fc4d3b0bdef691831cd95715a7ca3ebea98b2d
Fixed
5eecb49a6c268dc229005bf6e8167d4001dc09a0
Fixed
30cbf6ffafbbdd8a6e4e5f0a2e9a9827ee83f3ad
Fixed
7ece609b0ce7a7ea8acdf512a77d1fee26621637
Fixed
6e49a157d541e7e97b815a56f4bdfcbc89844a59
Fixed
6d411c8ccc0137a612e0044489030a194ff5c843

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41089.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.33
Fixed
4.19.317
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.279
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.221
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.162
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.97
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.37
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41089.json"