PT-2024-30757 · Linux+5 · Linux Kernel+5
Alex Deucher
+2
·
Published
2024-06-26
·
Updated
2026-05-26
·
CVE-2024-43899
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.0-41-generic #41~22.04.2-Ubuntu
Description
The issue is related to a null pointer dereference in the
dcn20 resource.c file of the Linux kernel's drm/amd/display module. This vulnerability can cause a hang when running MPV on a DCN401 dGPU with specific settings, such as mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all, and then enabling fullscreen playback. The call trace shows a kernel NULL pointer dereference at address 0000000000000000.Recommendations
To resolve this issue, update the Linux kernel to a version newer than 6.5.0-41-generic #41~22.04.2-Ubuntu. As a temporary workaround, consider avoiding the use of MPV with the specified settings on affected systems until a patch is available.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu