CVE-2024-27044

MEDIUM

Linux Kernel - NULL Pointer Dereference

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' The 'stream' pointer is used in dcn10_set_output_transfer_func() before the check if 'stream' is NULL. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn10/dcn10_hwseq.c:1892 dcn10_set_output_transfer_func() warn: variable dereferenced before check 'stream' (see line 1875)

References (9)

[Patch] https://git.kernel.org/stable/c/14613d52bc7fc180df6d2c65ba65fc921fc1dda7

[Patch] https://git.kernel.org/stable/c/29fde8895b2fcc33f44aea28c644ce2d9b62f9e0

[Patch] https://git.kernel.org/stable/c/2d9fe7787af01188dc470a649bdbb842d6511fd7

[Patch] https://git.kernel.org/stable/c/330caa061af53ea6d287d7c43d0703714e510e08

[Patch] https://git.kernel.org/stable/c/6ac7c7a3a9ab57aba0fe78ecb922d2b20e16efeb

[Patch] https://git.kernel.org/stable/c/7874ab3105ca4657102fee1cc14b0af70883c484

[Patch] https://git.kernel.org/stable/c/9ccfe80d022df7c595f1925afb31de2232900656

[Patch] https://git.kernel.org/stable/c/e019d87e02f1e539ae48b99187f253847744ca7a

[Patch] https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 1.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-476

Status published

Affected Products (9)

linux/linux_kernel < 5.4.273

debian/debian_linux

linux/Kernel < 5.4.273linux

linux/Kernel < 5.10.214linux

linux/Kernel < 5.15.153linux

linux/Kernel < 6.1.83linux

linux/Kernel < 6.6.23linux

linux/Kernel < 6.7.11linux

linux/Kernel < 6.8.2linux

Timeline

Published May 01, 2024

Tracked Since Feb 18, 2026