What’s Vulnerable › Vulnerabilities

CVE-2024-26662: drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-02 · updated 2026-10-30
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()' 'panel_cntl' structure used to control the display panel could be null, dereferencing it could lead to a null pointer access. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn21/dcn21_hwseq.c:269 dcn21_set_backlight_level() error: we previously assumed 'panel_cntl' could be null (see line 250)

Affected products

• Linux kernel: from 5.9 before 6.6.17; from 6.7 before 6.7.5; 6.8-rc1, 6.8-rc2, 6.8-rc3 — fixed in 6.6.17, 6.7.5
• Linux: 5.9 — fixed in 6.8

How to fix

Upgrade to a fixed version: Linux kernel 6.6.17, 6.7.5; Linux 6.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0c863cab0e9173f8b6c7bc328bee3b8625f131b5
• https://git.kernel.org/stable/c/2e150ccea13129eb048679114808eb9770443e4d
• https://git.kernel.org/stable/c/94a506cbfd1bd4817502bed097e24cbab23cfce3
• https://git.kernel.org/stable/c/e96fddb32931d007db12b1fce9b5e8e4c080401b
• https://git.kernel.org/stable/c/0c863cab0e9173f8b6c7bc328bee3b8625f131b5
• https://git.kernel.org/stable/c/2e150ccea13129eb048679114808eb9770443e4d
• https://git.kernel.org/stable/c/e96fddb32931d007db12b1fce9b5e8e4c080401b

Get alerted when CVE-2024-26662 or the next vulnerability affects your stack