In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Handle null 'streamstatus' in 'planeschangedforexisting_stream'
This commit adds a null check for 'streamstatus' in the function 'planeschangedforexistingstream'. Previously, the code assumed 'streamstatus' could be null, but did not handle the case where it was actually null. This could lead to a null pointer dereference.
Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/core/dcresource.c:3784 planeschangedforexistingstream() error: we previously assumed 'streamstatus' could be null (see line 3774)
[
{
"id": "CVE-2024-49912-1a76d38e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c",
"function": "planes_changed_for_existing_stream"
},
"digest": {
"function_hash": "150998019528768480238525034029736670180",
"length": 667.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8141f21b941710ecebe49220b69822cab3abd23d"
},
{
"id": "CVE-2024-49912-2aa2b48b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"digest": {
"line_hashes": [
"87506969226277835456744620067731367786",
"250455529259660066906291234724199955644",
"262080936885548892295282843193117712074",
"99428538360038329177641400011012768275",
"80363064179286678302365943183206581642"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4778982c73d6c9f3fdbdbc6b6c8aa18df98251af"
},
{
"id": "CVE-2024-49912-4db09852",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"digest": {
"line_hashes": [
"87506969226277835456744620067731367786",
"250455529259660066906291234724199955644",
"262080936885548892295282843193117712074",
"99428538360038329177641400011012768275",
"80363064179286678302365943183206581642"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4b699b93496c423b0e5b584d4eb4ab849313bcf"
},
{
"id": "CVE-2024-49912-59578c14",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"digest": {
"line_hashes": [
"87506969226277835456744620067731367786",
"250455529259660066906291234724199955644",
"262080936885548892295282843193117712074",
"99428538360038329177641400011012768275",
"80363064179286678302365943183206581642"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec6c32b58e6c4e87760e797c525e99a460c82bcb"
},
{
"id": "CVE-2024-49912-5e8b3ca9",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c",
"function": "planes_changed_for_existing_stream"
},
"digest": {
"function_hash": "150998019528768480238525034029736670180",
"length": 667.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4b699b93496c423b0e5b584d4eb4ab849313bcf"
},
{
"id": "CVE-2024-49912-955c9ac7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c",
"function": "planes_changed_for_existing_stream"
},
"digest": {
"function_hash": "150998019528768480238525034029736670180",
"length": 667.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ec6c32b58e6c4e87760e797c525e99a460c82bcb"
},
{
"id": "CVE-2024-49912-992d88b1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c",
"function": "planes_changed_for_existing_stream"
},
"digest": {
"function_hash": "150998019528768480238525034029736670180",
"length": 667.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ffd9fb03bbc99ed1eb5dc989d5c7da2faac0659"
},
{
"id": "CVE-2024-49912-bfd3e057",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c",
"function": "planes_changed_for_existing_stream"
},
"digest": {
"function_hash": "150998019528768480238525034029736670180",
"length": 667.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4778982c73d6c9f3fdbdbc6b6c8aa18df98251af"
},
{
"id": "CVE-2024-49912-e28da7cf",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"digest": {
"line_hashes": [
"87506969226277835456744620067731367786",
"250455529259660066906291234724199955644",
"262080936885548892295282843193117712074",
"99428538360038329177641400011012768275",
"80363064179286678302365943183206581642"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ffd9fb03bbc99ed1eb5dc989d5c7da2faac0659"
},
{
"id": "CVE-2024-49912-f8173101",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc_resource.c"
},
"digest": {
"line_hashes": [
"87506969226277835456744620067731367786",
"250455529259660066906291234724199955644",
"262080936885548892295282843193117712074",
"99428538360038329177641400011012768275",
"80363064179286678302365943183206581642"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8141f21b941710ecebe49220b69822cab3abd23d"
}
]