CVE-2024-49907

Source
https://cve.org/CVERecord?id=CVE-2024-49907
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49907.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-49907
Downstream
Related
Published
2024-10-21T18:01:37.452Z
Modified
2026-05-28T03:54:51.162981779Z
Summary
drm/amd/display: Check null pointers before using dc->clk_mgr
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check null pointers before using dc->clk_mgr

[WHY & HOW] dc->clk_mgr is null checked previously in the same function, indicating it might be null.

Passing "dc" to "dc->hwss.applyidlepoweroptimizations", which dereferences null "dc->clkmgr". (The function pointer resolves to "dcn35applyidlepoweroptimizations".)

This fixes 1 FORWARD_NULL issue reported by Coverity.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49907.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c
Fixed
8d54001f8dccd56146973f23f3ab2ba037a21251
Fixed
a545a9403e04c6e17fdc04a26a61d9feebbba106
Fixed
a2773e0a4b79e7a6463abdffaf8cc4f24428ba18
Fixed
9641bc4adf8446034e490ed543ae7e9833cfbdf5
Fixed
3f7e533c10db3d0158709a99e2129ff63add6bcd
Fixed
5ba3fbf75b243b2863a8be9e7c393e003d3b88f3
Fixed
95d9e0803e51d5a24276b7643b244c7477daf463

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49907.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
5.10.227
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.168
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.113
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.55
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.14
Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.11.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49907.json"