CVE-2024-26648

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26648
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay() In edp_setup_replay(), 'struct dc *dc' & 'struct dmub_replay *replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/dc/link/protocols/link_edp_panel_control.c:947 edp_setup_replay() warn: variable dereferenced before check 'link' (see line 933)

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/22ae604aea14756954e1c00ae653e34d2afd2935 Patch
https://git.kernel.org/stable/c/7073934f5d73f8b53308963cee36f0d389ea857c Patch
https://git.kernel.org/stable/c/c02d257c654191ecda1dc1af6875d527e85310e7 Patch
https://git.kernel.org/stable/c/22ae604aea14756954e1c00ae653e34d2afd2935 Patch
https://git.kernel.org/stable/c/7073934f5d73f8b53308963cee36f0d389ea857c Patch
https://git.kernel.org/stable/c/c02d257c654191ecda1dc1af6875d527e85310e7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Apr 2025, 19:29

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-476
References () https://git.kernel.org/stable/c/22ae604aea14756954e1c00ae653e34d2afd2935 - () https://git.kernel.org/stable/c/22ae604aea14756954e1c00ae653e34d2afd2935 - Patch
References () https://git.kernel.org/stable/c/7073934f5d73f8b53308963cee36f0d389ea857c - () https://git.kernel.org/stable/c/7073934f5d73f8b53308963cee36f0d389ea857c - Patch
References () https://git.kernel.org/stable/c/c02d257c654191ecda1dc1af6875d527e85310e7 - () https://git.kernel.org/stable/c/c02d257c654191ecda1dc1af6875d527e85310e7 - Patch

21 Nov 2024, 09:02

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/22ae604aea14756954e1c00ae653e34d2afd2935 - () https://git.kernel.org/stable/c/22ae604aea14756954e1c00ae653e34d2afd2935 -
References () https://git.kernel.org/stable/c/7073934f5d73f8b53308963cee36f0d389ea857c - () https://git.kernel.org/stable/c/7073934f5d73f8b53308963cee36f0d389ea857c -
References () https://git.kernel.org/stable/c/c02d257c654191ecda1dc1af6875d527e85310e7 - () https://git.kernel.org/stable/c/c02d257c654191ecda1dc1af6875d527e85310e7 -

06 Nov 2024, 22:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

27 Mar 2024, 12:29

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/amd/display: se corrigió la diferenciación de variables antes de la verificación NULL en edp_setup_replay() En edp_setup_replay(), se eliminó la referencia a 'struct dc *dc' y 'struct dmub_replay *replay' antes de la comprobación NULL del puntero 'enlace' y 'repetición'. Corrige lo siguiente: drivers/gpu/drm/amd/amdgpu/../display/dc/link/protocols/link_edp_panel_control.c:947 edp_setup_replay() advertencia: variable desreferenciada antes de marcar 'enlace' (ver línea 933)

26 Mar 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-26 18:15

Updated : 2025-04-08 19:29

NVD link : CVE-2024-26648

Mitre link : CVE-2024-26648

CVE.ORG link : CVE-2024-26648

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference