In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add NULL test for 'timing generator' in 'dcn21setpipe()'
In "u32 otginst = pipectx->streamres.tg->inst;" pipectx->stream_res.tg could be NULL, it is relying on the caller to ensure the tg is not NULL.
[
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26661-012a7cac",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f24c08363af1cd945abad84e3c87fd3e3c845a",
"digest": {
"length": 550.0,
"function_hash": "172753256738309606028080363895692116654"
},
"signature_version": "v1",
"target": {
"function": "dcn21_set_pipe",
"file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26661-335e59c7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3c237a706580326d3b7a1b97697e5031ca4667",
"digest": {
"line_hashes": [
"103459866379634607185666535213224106915",
"302860587404737845960496624366546939615",
"58051394791945270381505582628593632686",
"5114128034712627421033506101768396261",
"121767330996908351713667860294906191972",
"204698591387138702403514004413830999974",
"314262770337960440266272306067486439303",
"138003695621119368038317959435475556729",
"15343918234309188418029888442821938614",
"71644065300810048258874436346543864895",
"90236364334416624073531632030626196993",
"83288493378605872441637195668091726838",
"336751798893247152623508245971211355788",
"228067341677539797223977987191154258924",
"155410406764649433546052315855737208621",
"134738607091744254887250322502221628324",
"39476447032936911524909802581216549778",
"94533454769271157054387361397887667225",
"261899446754222989368043374533094959015",
"128999502843850703382194775109254084785",
"245230569419630055200783197253981279873",
"142756719365307059617442292294672670107",
"338224859108277854122735399123194226775"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hwseq.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26661-83fca6e1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3c237a706580326d3b7a1b97697e5031ca4667",
"digest": {
"length": 550.0,
"function_hash": "172753256738309606028080363895692116654"
},
"signature_version": "v1",
"target": {
"function": "dcn21_set_pipe",
"file": "drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hwseq.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26661-e80934a3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f24c08363af1cd945abad84e3c87fd3e3c845a",
"digest": {
"line_hashes": [
"103459866379634607185666535213224106915",
"302860587404737845960496624366546939615",
"58051394791945270381505582628593632686",
"5114128034712627421033506101768396261",
"121767330996908351713667860294906191972",
"204698591387138702403514004413830999974",
"314262770337960440266272306067486439303",
"138003695621119368038317959435475556729",
"15343918234309188418029888442821938614",
"71644065300810048258874436346543864895",
"90236364334416624073531632030626196993",
"83288493378605872441637195668091726838",
"336751798893247152623508245971211355788",
"228067341677539797223977987191154258924",
"155410406764649433546052315855737208621",
"134738607091744254887250322502221628324",
"39476447032936911524909802581216549778",
"94533454769271157054387361397887667225",
"261899446754222989368043374533094959015",
"128999502843850703382194775109254084785",
"245230569419630055200783197253981279873",
"142756719365307059617442292294672670107",
"338224859108277854122735399123194226775"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c"
}
}
]