What’s Vulnerable › Vulnerabilities

CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-02 · updated 2026-10-30
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' In "u32 otg_inst = pipe_ctx->stream_res.tg->inst;" pipe_ctx->stream_res.tg could be NULL, it is relying on the caller to ensure the tg is not NULL.

Affected products

• Linux kernel: from 5.9 before 6.6.17; from 6.7 before 6.7.5; 6.8-rc1, 6.8-rc2, 6.8-rc3 — fixed in 6.6.17, 6.7.5
• Linux: 5.9 — fixed in 6.8

How to fix

Upgrade to a fixed version: Linux kernel 6.6.17, 6.7.5; Linux 6.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/39f24c08363af1cd945abad84e3c87fd3e3c845a
• https://git.kernel.org/stable/c/3f3c237a706580326d3b7a1b97697e5031ca4667
• https://git.kernel.org/stable/c/66951d98d9bf45ba25acf37fe0747253fafdf298
• https://git.kernel.org/stable/c/e3bc103045c51271c3e7a808efb187a354678b7d
• https://git.kernel.org/stable/c/39f24c08363af1cd945abad84e3c87fd3e3c845a
• https://git.kernel.org/stable/c/3f3c237a706580326d3b7a1b97697e5031ca4667
• https://git.kernel.org/stable/c/66951d98d9bf45ba25acf37fe0747253fafdf298

Get alerted when CVE-2024-26661 or the next vulnerability affects your stack