PT-2024-33950 · Linux+8 · Linux Kernel+8

Published 2024-11-05 · Updated 2025-10-03 · CVE-2024-50117

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: The issue arises when a BIOS provides bad data in response to an ATIF method call, causing a NULL pointer dereference in the caller. This has been encountered on at least one system. The amdgpu atif query backlight caps.constprop.0 function is involved in the issue, and the problem occurs when the BIOS provides incorrect data.

Recommendations: Update to Linux kernel version 6.6.61 or later to resolve the issue. As a temporary workaround, consider disabling the amdgpu atif query backlight caps.constprop.0 function until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-15245

ALT-PU-2024-15251

ALT-PU-2024-15467

ALT-PU-2024-15473

ALT-PU-2024-15739

ALT-PU-2024-16172

ALT-PU-2024-17099

ALT-PU-2024-17211

ALT-PU-2025-12647

AZL-52471

AZL-52500

BDU:2025-03361

CVE-2024-50117

DLA-4008-1

DLA-4075-1

INFSA-2025_6966

MGASA-2024-0368

MGASA-2024-0369

OESA-2024-2449

OESA-2024-2537

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2024_4314-1

OPENSUSE-SU-2024_4315-1

OPENSUSE-SU-2024_4316-1

OPENSUSE-SU-2024_4376-1

OPENSUSE-SU-2025:14705-1

RHSA-2025:6966

RHSA-2025_6966

SUSE-SU-2024:4314-1

SUSE-SU-2024:4315-1

SUSE-SU-2024:4316-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4367-1

SUSE-SU-2024:4376-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:0035-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

USN-7276-1

USN-7277-1

USN-7288-1

USN-7288-2

USN-7289-1

USN-7289-2

USN-7289-3

USN-7289-4

USN-7291-1

USN-7293-1

USN-7294-1

USN-7294-2

USN-7294-3

USN-7294-4

USN-7295-1

USN-7305-1

USN-7308-1

USN-7310-1

USN-7331-1

USN-7332-1

USN-7332-2

USN-7332-3

USN-7342-1

USN-7344-1

USN-7344-2

USN-7383-1

USN-7383-2

USN-7384-1

USN-7384-2

USN-7385-1

USN-7386-1

USN-7388-1

USN-7389-1

USN-7390-1

USN-7393-1

USN-7401-1

USN-7403-1

USN-7413-1

USN-7451-1

USN-7458-1

USN-7468-1

USN-7523-1

USN-7524-1

USN-7539-1

USN-7540-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 2997

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50117.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://git.kernel.org/stable/c/234682910971732cd4da96fd95946e296e486b38 · Patch
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7291-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56620 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53103 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7332-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53154 · Vendor Advisory