CVE-2024-26729

MEDIUM

Linux Kernel 6.7-6.7.6 - Null Pointer Dereference in dc_dmub_srv

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv Fixes potential null pointer dereference warnings in the dc_dmub_srv_cmd_list_queue_execute() and dc_dmub_srv_is_hw_pwr_up() functions. In both functions, the 'dc_dmub_srv' variable was being dereferenced before it was checked for null. This could lead to a null pointer dereference if 'dc_dmub_srv' is null. The fix is to check if 'dc_dmub_srv' is null before dereferencing it. Thus moving the null checks for 'dc_dmub_srv' to the beginning of the functions to ensure that 'dc_dmub_srv' is not null when it is dereferenced. Found by smatch & thus fixing the below: drivers/gpu/drm/amd/amdgpu/../display/dc/dc_dmub_srv.c:133 dc_dmub_srv_cmd_list_queue_execute() warn: variable dereferenced before check 'dc_dmub_srv' (see line 128) drivers/gpu/drm/amd/amdgpu/../display/dc/dc_dmub_srv.c:1167 dc_dmub_srv_is_hw_pwr_up() warn: variable dereferenced before check 'dc_dmub_srv' (see line 1164)

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 10.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (9)
linux/Kernel 6.7.0 - 6.7.7linux
Linux/Linux < 6.7
Linux/Linux 6.7
Linux/Linux 6.7.7 - 6.7.*
Linux/Linux 6.8
Linux/Linux 65138eb72e1fc687be49932b9a45325598ffa01c - 351080ba3414c96afff0f1338b4aeb2983195b80
Linux/Linux 65138eb72e1fc687be49932b9a45325598ffa01c - d2b48f340d9e4a8fbeb1cdc84cd8da6ad143a907
linux/linux_kernel 6.8 rc1 (5 CPE variants)
linux/linux_kernel 6.7 - 6.7.7
Published Apr 03, 2024
Tracked Since Feb 18, 2026