PT-2024-31323 · Linux+3 · Linux Kernel+3

Alex Deucher

+5

·

Published

2024-09-04

·

Updated

2026-05-26

·

CVE-2024-44955

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue occurs when a monitor connected after an MST hub is unplugged, resulting in a null pointer dereference. This happens because dc sink is released immediately in early unregister() or detect ctx(), and committing a new state that refers to information stored in dc sink causes a null pointer dereference. The problem is resolved by removing a redundant checking condition and resetting dsc aux to NULL when the connector is disconnected.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2024-44955
ECHO-A3DD-5DE2-145E
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu