PT-2024-30690 · Linux+6 · Linux Kernel+6
Published
2024-06-26
·
Updated
2025-09-29
·
CVE-2024-43829
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the drm/qxl component. The problem arises when the
drm cvt mode() function fails, and its return value is not properly checked, leading to a potential NULL pointer dereference. This issue has been resolved by adding a check for the return value of drm cvt mode() and returning an error if it fails.Recommendations
To resolve this issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider disabling the
drm cvt mode() function until a patch is available. However, this might have unintended consequences on the system's functionality, so it should be done with caution.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu