PT-2024-28513 · Linux+4 · Linux Kernel+4

Leon Weiß · Published 2024-03-07 · Updated 2025-09-29 · CVE-2024-39498

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue has been resolved in the Linux kernel, specifically in the drm/mst component. The issue was caused by commits 5aa1dfcdf0a4 and 54d217406afe, which accidentally overwrote previous commits and caused regression. The fix involves recovering the original NULL fix and removing the unnecessary input parameter state for the drm dp add payload part2() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-03030

CVE-2024-39498

INFSA-2024_9315

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2024:2802-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

Affected Products

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 2166

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39498.json · Exploit
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40921 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7029-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38634 · Vendor Advisory
• https://git.kernel.org/stable/c/5a507b7d2be15fddb95bf8dee01110b723e2bcd9 · Patch
• https://ubuntu.com/security/CVE-2024-36489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40948 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7005-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40986 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39509 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40905 · Vendor Advisory