CVE-2024-49914

Source
https://cve.org/CVERecord?id=CVE-2024-49914
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49914.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-49914
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (4)
openSUSE (2)
ROOT (3)
SUSE (11)
UBUNTU (1)
Related
Published
2024-10-21T18:01:42Z
Modified
2026-11-01T02:31:49Z
Summary
drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe

This commit addresses a null pointer dereference issue in the dcn20_program_pipe function. The issue could occur when pipe_ctx->plane_state is null.

The fix adds a check to ensure pipe_ctx->plane_state is not null before accessing. This prevents a null pointer dereference.

Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn20/dcn20_hwseq.c:1925 dcn20_program_pipe() error: we previously assumed 'pipe_ctx->plane_state' could be null (see line 1877)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49914.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c
Fixed
21c613e1c6ae45bb29ebc156d22060f034cc5665
Fixed
68f75e6f08aad66069a629db8d7840919156c761
Fixed
65a6fee22d5cfa645cb05489892dc9cd3d142fc2
Fixed
8e4ed3cf1642df0c4456443d865cff61a9598aa8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49914.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.64
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49914.json"