OSV - Open Source Vulnerabilities

CVE-2024-43894

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-43894
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-43894.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-43894
Downstream
Related
Published
2024-08-26T10:10:49Z
Modified
2026-08-12T03:30:31Z
Summary
drm/client: fix null pointer dereference in drm_client_modeset_probe
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/client: fix null pointer dereference in drm_client_modeset_probe

In drm_client_modeset_probe(), the return value of drm_mode_duplicate() is assigned to modeset->mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43894.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cf13909aee054f5aa667d4b9da0ac7df4f6c1327
Fixed
24ddda932c43ffe156c7f3c568bed85131c63ae6
Fixed
5291d4f73452c91e8a11f71207617e3e234d418e
Fixed
c763dfe09425152b6bb0e348900a637c62c2ce52
Fixed
d64847c383100423aecb6ac5f18be5f4316d9d62
Fixed
d64fc94f7bb24fc2be0d6bd5df8df926da461a6d
Fixed
612cae53e99ce32a58cb821b3b67199eb6e92dff
Fixed
113fd6372a5bb3689aba8ef5b8a265ed1529a78f

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-43894.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.3.0
Fixed
5.4.282
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.224
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.165
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.105
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.46
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.5

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-43894.json"