CVE-2024-26662

Source
https://cve.org/CVERecord?id=CVE-2024-26662
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26662.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-26662
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
RHSA (1)
ROOT (3)
UBUNTU (1)
Published
2024-04-02T06:22:11Z
Modified
2026-11-01T02:35:52Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'

'panel_cntl' structure used to control the display panel could be null, dereferencing it could lead to a null pointer access.

Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn21/dcn21_hwseq.c:269 dcn21_set_backlight_level() error: we previously assumed 'panel_cntl' could be null (see line 250)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26662.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
474ac4a875ca6fea3fc5183d3ad22ef7523dca53
Fixed
94a506cbfd1bd4817502bed097e24cbab23cfce3
Fixed
2e150ccea13129eb048679114808eb9770443e4d
Fixed
0c863cab0e9173f8b6c7bc328bee3b8625f131b5
Fixed
e96fddb32931d007db12b1fce9b5e8e4c080401b

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26662.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.9.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.17
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26662.json"