DEBIAN-CVE-2024-26649

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2024-26649

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26649.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-26649

Upstream

CVE-2024-26649

Published

2024-03-26T18:15:10Z

Modified

2025-09-19T06:23:52Z

Summary

[none]

Details

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firmware If the RLC firmware is invalid because of wrong header size, the pointer to the rlc firmware is released in function amdgpuucoderequest. There will be a null pointer error in subsequent use. So skip validation to fix it.

References

https://security-tracker.debian.org/tracker/CVE-2024-26649

Affected packages

Debian:13 / linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.6.15-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.6.15-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}