PT-2024-9064 · Linux+5 · Linux Kernel+5
Aleksandr Mishin
·
Published
2024-04-08
·
Updated
2025-02-03
·
CVE-2024-38548
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a possible null pointer dereference in the
cdns mhdp atomic enable() function. The return value of drm mode duplicate() is assigned to mhdp state->current mode, and there is a dereference of it in drm mode set name(), which will lead to a NULL pointer dereference on failure of drm mode duplicate(). This can cause a denial of service.Recommendations:
To resolve the issue, add a check of
mhdp state->current mode in the cdns mhdp atomic enable() function to prevent the null pointer dereference.
As a temporary workaround, consider disabling the cdns mhdp atomic enable() function until a patch is available.
Update to a kernel version that includes the fix, such as version 6.6.37 or later.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu