PT-2024-3478 · Linux+1 · Linux Kernel+1

Published 2024-01-15 · Updated 2026-05-26 · CVE-2024-26648

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the function edp setup replay() in the Linux kernel, specifically in the module drivers/gpu/drm/amd/display/dc/link/protocols/link edp panel control.c. The problem arises from dereferencing a null pointer, which can lead to a denial of service. In the edp setup replay() function, struct dc *dc and struct dmub replay *replay are dereferenced before checking if the link and replay pointers are null. This issue is fixed by addressing the variable deferencing before the null check in edp setup replay().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-03773

CVE-2024-26648

ECHO-5703-DE33-BD01

Affected Products

Debian

Linux Kernel

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26648.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26648 · Vendor Advisory
• https://git.kernel.org/stable/c/7073934f5d73f8b53308963cee36f0d389ea857c · Patch
• https://ubuntu.com/security/CVE-2024-26648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26648 · Security Note
• https://git.kernel.org/stable/c/22ae604aea14756954e1c00ae653e34d2afd2935 · Patch
• https://git.kernel.org/stable/c/c02d257c654191ecda1dc1af6875d527e85310e7 · Patch
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2024-0905SE18MD · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26648 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-26648 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-26648 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-26648 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-26648 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03773 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-26648 · Vendor Advisory