CVE-2024-49898

medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null-initialized variables [WHAT & HOW] drr_timing and subvp_pipe are initialized to null and they are not always assigned new values. It is necessary to check for null before dereferencing. This fixes 2 FORWARD_NULL issues reported by Coverity.

References

https://git.kernel.org/stable/c/c3a3b6d9a9383e3c1a4a08878ba5046e68647595

https://git.kernel.org/stable/c/3fc70ae048fe0936761b73b50700a810ff61e853

https://git.kernel.org/stable/c/367cd9ceba1933b63bc1d87d967baf6d9fd241d2

https://git.kernel.org/stable/c/26d262b79a3587aaa84368586a55e9026c67841b

https://git.kernel.org/stable/c/115b1a3b0944b4d8ef0b4b0c5a625bdd9474131f

Details

Source: Mitre, NVD

Published: 2024-10-21

Updated: 2024-12-14

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium