PT-2024-21439 · Linux+4 · Linux Kernel+4

Published 2024-02-07 · Updated 2026-05-26 · CVE-2024-26662

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the drm/amd/display component, where the panel cntl structure used to control the display panel could be null. Dereferencing this null pointer could lead to a null pointer access. The problem is specifically found in the dcn21 set backlight level() function, located in the drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn21/dcn21 hwseq.c file at line 269.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

AZL-59675

BDU:2025-15041

CVE-2024-26662

ECHO-7C8E-4955-A901

INFSA-2024_9315

RHSA-2024:9315

RHSA-2024_9315

USN-6895-1

USN-6895-2

USN-6895-3

USN-6895-4

USN-6900-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Hat

Ubuntu

References · 143

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26662.json · Exploit
• https://ubuntu.com/security/CVE-2024-26830 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26722 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26717 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26719 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26697 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26716 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52631 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26826 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27416 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26818 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26698 · Vendor Advisory