Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-49893 State: PUBLISHED Published: 2024-10-21T18:01:27.681Z Last Updated: 2025-07-11T17:20:54.598Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream_status before it is used [WHAT & HOW] dc_state_get_stream_status can return null, and therefore null must be checked before stream_status is used. This fixes 1 NULL_RETURNS issue reported by Coverity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4914c8bfee1843fae046a12970b6f178e6642659 - https://git.kernel.org/stable/c/58a8ee96f84d2c21abb85ad8c22d2bbdf59bd7a9
CVE ID: CVE-2024-49894 State: PUBLISHED Published: 2024-10-21T18:01:28.360Z Last Updated: 2025-11-03T22:22:58.352Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in `cm_helper_translate_curve_to_degamma_hw_format` function. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds the function returns false to indicate an error. Reported by sma
g the transfer function points. If 'i' is out of bounds the function returns false to indicate an error. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:594 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:595 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:596 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max Additional Analyst Notes: - CISA
e_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b3dfa878257a7e98830b3009ca5831a01d8f85fc - https://git.kernel.org/stable/c/f5f6d90087131812c1e4b9d3103f400f1624396d - https://git.kernel.org/stable/c/c130a3c09e3746c1a09ce26c20d21d449d039b1d - https://git.kernel.org/stable/c/c6979719012a90e5b8e3bc31725fbfdd0b9b2b79 - https://git.kernel.org/stable/c/2495c8e272d84685403506833a664fad932e453a - https://git.kernel.org/stable/c/122e3a7a8c7bcbe3aacddd6103f67f9f36bed473 - https://git.kernel.org/stable/c/2f5da549535be8ccd2ab7c9abac8562ad370b181
le/c/122e3a7a8c7bcbe3aacddd6103f67f9f36bed473 - https://git.kernel.org/stable/c/2f5da549535be8ccd2ab7c9abac8562ad370b181 - https://git.kernel.org/stable/c/07078fa5d589a7fbce8f81ea8acf7aa0021ab38e - https://git.kernel.org/stable/c/b7e99058eb2e86aabd7a10761e76cae33d22b49f
CVE ID: CVE-2024-49895 State: PUBLISHED Published: 2024-10-21T18:01:29.028Z Last Updated: 2025-11-03T22:22:59.810Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation This commit addresses a potential index out of bounds issue in the `cm3_helper_translate_curve_to_degamma_hw_format` function in the DCN30 color management module. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is ou
POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, the function returns false to indicate an error. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:338 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:339 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:340 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer o
m/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:340 cm3_helper_translate_curve_to_degamma_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ad89f83343a501890cf082c8a584e96b59fe4015 - https://git.kernel.org/stable/c/de6ee4f9e6b1c36b4fdc7c345c1a6de9e246093e - https://git.kernel.org/stable/c/f3ccd855b4395ce65f10dd37847167f52e122b70 - https://git.kernel.org/stable/c/0d38a0751143afc03faef02d55d31f70374ff843 - https://git.kernel.org/stable/c/f5c3d306de91a4b69cfe3eedb72b42d452593e42 - https://git.kernel.org/stable/c/c4fdc2d6fea129684b82bab90bb52fbace4
/stable/c/f5c3d306de91a4b69cfe3eedb72b42d452593e42 - https://git.kernel.org/stable/c/c4fdc2d6fea129684b82bab90bb52fbace494a58 - https://git.kernel.org/stable/c/bc50b614d59990747dd5aeced9ec22f9258991ff
CVE ID: CVE-2024-49896 State: PUBLISHED Published: 2024-10-21T18:01:29.700Z Last Updated: 2025-11-03T22:23:01.340Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before comparing them [WHAT & HOW] amdgpu_dm can pass a null stream to dc_is_stream_unchanged. It is necessary to check for null before dereferencing them. This fixes 1 FORWARD_NULL issue reported by Coverity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3944d226f55235a960d8f1135927f95e9801be12 - https://git.kernel.org/stable/c/471c53350ab83e47a2a117c2738ce0363785
stable/c/3944d226f55235a960d8f1135927f95e9801be12 - https://git.kernel.org/stable/c/471c53350ab83e47a2a117c2738ce0363785976e - https://git.kernel.org/stable/c/0167d570f6a0b38689c4a0e50bf79c518d827500 - https://git.kernel.org/stable/c/14db8692afe1aa2143b673856bb603713d8ea93f - https://git.kernel.org/stable/c/e8da54b7f8a17e44e67ea6d1037f35450af28115 - https://git.kernel.org/stable/c/42d31a33643813cce55ee1ebbad3a2d0d24a08e0 - https://git.kernel.org/stable/c/5b4b13e678b15975055f4ff1ce4cf0ce4c19b6c4 - https://git.kernel.org/stable/c/e41a291e1bef1153bba091b6580ecc7affc53c82 - https://git.kernel.org/stable/c/35ff747c86767937ee1e0ca987545b7eed7a0810
CVE ID: CVE-2024-49897 State: PUBLISHED Published: 2024-10-21T18:01:30.384Z Last Updated: 2025-11-03T20:41:43.800Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check phantom_stream before it is used dcn32_enable_phantom_stream can return null, so returned value must be checked before used. This fixes 1 NULL_RETURNS issue reported by Coverity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/db1d7e1794fed62ee16d6a72a85997bb069e2e27 - https://git.kernel.org/stable/c/d247af7c5dbf143ad6be8179bb1550e76d6af57e - https://git.kernel.org/stable/c
7bb069e2e27 - https://git.kernel.org/stable/c/d247af7c5dbf143ad6be8179bb1550e76d6af57e - https://git.kernel.org/stable/c/1decf695ce08e23d9ded6ce83d121b2282ce9899 - https://git.kernel.org/stable/c/3ba1219e299ab5462b5cb374c2fa2a67af0ea190 - https://git.kernel.org/stable/c/3718a619a8c0a53152e76bb6769b6c414e1e83f4
CVE ID: CVE-2024-49898 State: PUBLISHED Published: 2024-10-21T18:01:31.212Z Last Updated: 2025-11-03T20:41:45.246Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null-initialized variables [WHAT & HOW] drr_timing and subvp_pipe are initialized to null and they are not always assigned new values. It is necessary to check for null before dereferencing. This fixes 2 FORWARD_NULL issues reported by Coverity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/26d262b79a3587aaa84368586a55e9026c67841b - https://git.kernel.org/stable/c/c3a3b6d
es: - https://git.kernel.org/stable/c/26d262b79a3587aaa84368586a55e9026c67841b - https://git.kernel.org/stable/c/c3a3b6d9a9383e3c1a4a08878ba5046e68647595 - https://git.kernel.org/stable/c/3fc70ae048fe0936761b73b50700a810ff61e853 - https://git.kernel.org/stable/c/115b1a3b0944b4d8ef0b4b0c5a625bdd9474131f - https://git.kernel.org/stable/c/367cd9ceba1933b63bc1d87d967baf6d9fd241d2
CVE ID: CVE-2024-49899 State: PUBLISHED Published: 2024-10-21T18:01:31.911Z Last Updated: 2025-11-03T20:41:46.656Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominators' default to 1 [WHAT & HOW] Variables used as denominators and maybe not assigned to other values, should not be 0. Change their default to 1 so they are never 0. This fixes 10 DIVIDE_BY_ZERO issues reported by Coverity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9be768f08b16f020da376538b08463ac3a2ce8cd - https://git.kernel.org/stable/c/9f35cec5e4b9759
tps://git.kernel.org/stable/c/9be768f08b16f020da376538b08463ac3a2ce8cd - https://git.kernel.org/stable/c/9f35cec5e4b9759b38c663d18eae4eaf30f36527 - https://git.kernel.org/stable/c/7f8e93b862aba08d540f1e9e03e0ceb4d0cfd5fb - https://git.kernel.org/stable/c/b995c0a6de6c74656a0c39cd57a0626351b13e3c
CVE ID: CVE-2024-49900 State: PUBLISHED Published: 2024-10-21T18:01:32.607Z Last Updated: 2025-11-03T22:23:02.861Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1_do_compress is using uninit-value: ===================================================== BUG: KMSAN: uninit-value in lzo1x_1_do_compress+0x19f9/0x2510 lib/lzo/lzo1x_compress.c:178 ... Uninit was stored to memory at: ea_put fs/jfs/xattr.c:639 [inline] ... Local variable ea_buf created at: __jfs_setxattr+0x5d/0x1ae0 fs/jfs/xattr.c:662 __jfs_xattr_set+0xe6/0x1f0 fs/jfs/xattr.c:934 ============
buf created at: __jfs_setxattr+0x5d/0x1ae0 fs/jfs/xattr.c:662 __jfs_xattr_set+0xe6/0x1f0 fs/jfs/xattr.c:934 ===================================================== The reason is ea_buf->new_ea is not initialized properly. Fix this by using memset to empty its content at the beginning in ea_get(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7b24d41d47a6805c45378debf8bd115675d41da8 - https://git.kernel.org/stable/c/dac398ed272a378d2f42ac68ae408333a51baf52 - https://git.kernel.org/stable/c/8b1dcf25c26d42e4a68c4725ce52a0543c7878cc - https://git.kernel.org/stable/c/d7444f91a9f93eaa48827087ed0f3381c194181d - https://git.ke
42e4a68c4725ce52a0543c7878cc - https://git.kernel.org/stable/c/d7444f91a9f93eaa48827087ed0f3381c194181d - https://git.kernel.org/stable/c/6041536d18c5f51a84bc37cd568cbab61870031e - https://git.kernel.org/stable/c/c076b3746224982eebdba5c9e4b1467e146c0d64 - https://git.kernel.org/stable/c/7c244d5b48284a770d96ff703df2dfeadf804a73 - https://git.kernel.org/stable/c/8ad8b531de79c348bcb8133e7f5e827b884226af - https://git.kernel.org/stable/c/2b59ffad47db1c46af25ccad157bb3b25147c35c
CVE ID: CVE-2024-49901 State: PUBLISHED Published: 2024-10-21T18:01:33.258Z Last Updated: 2025-07-28T11:16:41.182Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs There are some cases, such as the one uncovered by Commit 46d4efcccc68 ("drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails") where msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL); is called on gpu->pdev == NULL, as the GPU device has not been fully initialized yet. Turns out that there's more than just the aforementioned path that causes this to happen (e.g. the case when there
yet. Turns out that there's more than just the aforementioned path that causes this to happen (e.g. the case when there's speedbin data in the catalog, but opp-supported-hw is missing in DT). Assigning msm_gpu->pdev earlier seems like the least painful solution to this, therefore do so. Patchwork: https://patchwork.freedesktop.org/patch/602742/ Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9288a9676c529ad9c856096db68fad812499bc4a - https://git.kernel.org/stable/c/9773737375b20070ea935203fd66cb9fa17c5acb - https://git.kernel.org/stable/c/e8ac2060597a5768e4699bb61d604b4c09927b85 - https://git.kernel.org/stable/c/16007768551d5bfe53426645401435
l.org/stable/c/e8ac2060597a5768e4699bb61d604b4c09927b85 - https://git.kernel.org/stable/c/16007768551d5bfe53426645401435ca8d2ef54f
CVE ID: CVE-2024-49902 State: PUBLISHED Published: 2024-10-21T18:01:33.936Z Last Updated: 2025-11-03T22:23:04.357Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf. Shaggy: Modified sanity check to apply to control pages as well as leaf pages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/d76b9a4c283c7535ae7c7c9b14984e75402951e1 - https://git.kernel.
Container: References: - https://git.kernel.org/stable/c/d76b9a4c283c7535ae7c7c9b14984e75402951e1 - https://git.kernel.org/stable/c/35b91f15f44ce3c01eba058ccb864bb04743e792 - https://git.kernel.org/stable/c/2451e5917c56be45d4add786e2a059dd9c2c37c4 - https://git.kernel.org/stable/c/25d2a3ff02f22e215ce53355619df10cc5faa7ab - https://git.kernel.org/stable/c/058aa89b3318be3d66a103ba7c68d717561e1dc6 - https://git.kernel.org/stable/c/7fff9a9f866e99931cf6fa260288e55d01626582 - https://git.kernel.org/stable/c/cb0eb10558802764f07de1dc439c4609e27cb4f0 - https://git.kernel.org/stable/c/4a7bf6a01fb441009a6698179a739957efd88e38 - https://git.kernel.org/stable/c/d64ff0d2306713ff084d4b09f84ed1a8c75ecc32
CVE ID: CVE-2024-49903 State: PUBLISHED Published: 2024-10-21T18:01:34.603Z Last Updated: 2025-11-03T22:23:05.835Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ================================================================== BUG: KASAN: slab-use-after-free in __mutex_lock_common kernel/locking/mutex.c:587 [inline] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfe/0xd70 kernel/locking/mutex.c:752 Read of size 8 at addr ffff8880229254b0 by task syz-executor357/5216 CPU: 0 UID: 0 PID: 5216 Comm: syz-executor357 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 Hardware name
5216 CPU: 0 UID: 0 PID: 5216 Comm: syz-executor357 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 __mutex_lock_common kernel/locking/mutex.c:587 [inline] __mutex_lock+0xfe/0xd70 kernel/locking/mutex.c:752 dbFreeBits+0x7ea/0xd90 fs/jfs/jfs_dmap.c:2390 dbFreeDmap fs/jfs/jfs_dmap.c:2089 [inline] dbFree+0x35b/0x680 fs/jfs/jfs_dmap.c:409 dbDisc
/0xd90 fs/jfs/jfs_dmap.c:2390 dbFreeDmap fs/jfs/jfs_dmap.c:2089 [inline] dbFree+0x35b/0x680 fs/jfs/jfs_dmap.c:409 dbDiscardAG+0x8a9/0xa20 fs/jfs/jfs_dmap.c:1650 jfs_ioc_trim+0x433/0x670 fs/jfs/jfs_discard.c:100 jfs_ioctl+0x2d0/0x3e0 fs/jfs/ioctl.c:131 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 Freed by task 5218: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240 __kasan_sla
68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2252 [inline] slab_free mm/slub.c:4473 [inline] kfree+0x149/0x360 mm/slub.c:4594 dbUnmount+0x11d/0x190 fs/jfs/jfs_dmap.c:278 jfs_mount_rw+0x4ac/0x6a0 fs/jfs/jfs_mount.c:247 jfs_remount+0x3d1/0x6b0 fs/jfs/super.c:454 reconfigure_super+0x445/0x880 fs/super.c:1083 vfs_cmd_reconfigure fs/fsopen.c:263 [inline] vfs_fsconfig_locked fs/fsopen.c:292 [inline] __do_sys_fsconfig fs/fsopen.c:473 [inline] __se_sys_fsconfig+0xb6e/0xf80 fs/fsopen.c:345 do_syscall_x64 arch/x86/
nline] __do_sys_fsconfig fs/fsopen.c:473 [inline] __se_sys_fsconfig+0xb6e/0xf80 fs/fsopen.c:345 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f [Analysis] There are two paths (dbUnmount and jfs_ioc_trim) that generate race condition when accessing bmap, which leads to the occurrence of uaf. Use the lock s_umount to synchronize them, in order to avoid uaf caused by race condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4ac58f7734937f3249da734ede946dfb3b1af5e4 - https://git.kernel.org/stable/c/3126ccde51f51b0648c8cdcc
.kernel.org/stable/c/4ac58f7734937f3249da734ede946dfb3b1af5e4 - https://git.kernel.org/stable/c/3126ccde51f51b0648c8cdccaf916e8bd062e972 - https://git.kernel.org/stable/c/fd026b6b6758d5569705c02540b40f3bbf822b9a - https://git.kernel.org/stable/c/e7ae14f7ee76c6ef5a48aebab1a278ad78f42619 - https://git.kernel.org/stable/c/0c238da83f56bb895cab1e5851d034ac45b158d1 - https://git.kernel.org/stable/c/4218b31ecc7af7e191768d32e32ed4386d8f9b76 - https://git.kernel.org/stable/c/a9603a6f75df2fd8125cd208c98cfaa0fe3f7505 - https://git.kernel.org/stable/c/95accb7183badca387f7a8d19a2475cf3089f148 - https://git.kernel.org/stable/c/d6c1b3599b2feb5c7291f5ac3a36e5fa7cedb234
CVE ID: CVE-2024-49904 State: PUBLISHED Published: 2024-10-21T18:01:35.279Z Last Updated: 2025-05-04T09:40:54.567Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list empty check to avoid null pointer issues in some corner cases. - list_for_each_entry_safe() Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/5ec731ef47f1dba34daad3e51a93de793f9319ac - https://git.kernel.org/stable/c/8e87763946f708063d7e5303339598abbb8c5aac - https://git.kernel.org/stable/c/4416377ae1fdc41a90b665943152ccd7ff61d3c5
CVE ID: CVE-2024-49905 State: PUBLISHED Published: 2024-10-21T18:01:36.038Z Last Updated: 2025-11-03T22:23:07.285Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) This commit adds a null check for the 'afb' variable in the amdgpu_dm_plane_handle_cursor_update function. Previously, 'afb' was assumed to be null, but was used later in the code without a null check. This could potentially lead to a null pointer dereference. Changes since v1: - Moved the null check for 'afb' to the line where 'afb' is used. (Alex) Fixes the below: drivers/gpu/drm/a
es since v1: - Moved the null check for 'afb' to the line where 'afb' is used. (Alex) Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_plane.c:1298 amdgpu_dm_plane_handle_cursor_update() error: we previously assumed 'afb' could be null (see line 1252) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/bd0e24e5e608ccb9fdda300bb974496d6d8cf57d - https://git.kernel.org/stable/c/75839e2365b666ff4e1b9047e442cab138eac4f6 - https://git.kernel.org/stable/c/9132882eaae4d21d2fc5843b3308379a481ebdf0 - https://git.kernel.org/stable/c/e4e26cbe34d7c1c1db5fb7b3101573c29866439f - https://git.kernel.org/stable/c/
9a481ebdf0 - https://git.kernel.org/stable/c/e4e26cbe34d7c1c1db5fb7b3101573c29866439f - https://git.kernel.org/stable/c/cd9e9e0852d501f169aa3bb34e4b413d2eb48c37
CVE ID: CVE-2024-49906 State: PUBLISHED Published: 2024-10-21T18:01:36.753Z Last Updated: 2025-07-11T17:21:03.199Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointer before try to access it [why & how] Change the order of the pipe_ctx->plane_state check to ensure that plane_state is not null before accessing it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/ebef6616219ff04abdeb39450625f85419787ee3 - https://git.kernel.org/stable/c/2002ccb93004e76a471b180560accb2c1f850f35 - https://git.kernel.org/stable/c/1b686053c06ffb9f4524b288110cf2a831ff7a25
CVE ID: CVE-2024-49907 State: PUBLISHED Published: 2024-10-21T18:01:37.452Z Last Updated: 2025-11-03T22:23:08.742Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc->clk_mgr [WHY & HOW] dc->clk_mgr is null checked previously in the same function, indicating it might be null. Passing "dc" to "dc->hwss.apply_idle_power_optimizations", which dereferences null "dc->clk_mgr". (The function pointer resolves to "dcn35_apply_idle_power_optimizations".) This fixes 1 FORWARD_NULL issue reported by Coverity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
WARD_NULL issue reported by Coverity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/8d54001f8dccd56146973f23f3ab2ba037a21251 - https://git.kernel.org/stable/c/a545a9403e04c6e17fdc04a26a61d9feebbba106 - https://git.kernel.org/stable/c/a2773e0a4b79e7a6463abdffaf8cc4f24428ba18 - https://git.kernel.org/stable/c/9641bc4adf8446034e490ed543ae7e9833cfbdf5 - https://git.kernel.org/stable/c/3f7e533c10db3d0158709a99e2129ff63add6bcd - https://git.kernel.org/stable/c/5ba3fbf75b243b2863a8be9e7c393e003d3b88f3 - https://git.kernel.org/stable/c/95d9e0803e51d5a24276b7643b244c7477daf463
CVE ID: CVE-2024-49908 State: PUBLISHED Published: 2024-10-21T18:01:38.149Z Last Updated: 2025-07-11T17:21:05.631Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2) This commit adds a null check for the 'afb' variable in the amdgpu_dm_update_cursor function. Previously, 'afb' was assumed to be null at line 8388, but was used later in the code without a null check. This could potentially lead to a null pointer dereference. Changes since v1: - Moved the null check for 'afb' to the line where 'afb' is used. (Alex) Fixes the below: drivers/gpu/drm/amd/amdgpu/../
- Moved the null check for 'afb' to the line where 'afb' is used. (Alex) Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm.c:8433 amdgpu_dm_update_cursor() error: we previously assumed 'afb' could be null (see line 8388) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a742168b6a39ead257da53bcbe472384d6e14a1b - https://git.kernel.org/stable/c/0fe20258b4989b9112b5e9470df33a0939403fd4