What’s Vulnerable › Vulnerabilities

CVE-2024-26948: drm/amd/display: Add a dc_state NULL check in dc_state_release

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-01 · updated 2026-10-30
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dc_state NULL check in dc_state_release [How] Check wheather state is NULL before releasing it.

Affected products

• Linux kernel: from 4.15 before 6.8.3 — fixed in 6.8.3
• Linux: 4.15 — fixed in 6.9

How to fix

Upgrade to a fixed version: Linux kernel 6.8.3; Linux 6.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3218df42ff3b187f055edb8a38498b316bae0ecd
• https://git.kernel.org/stable/c/334b56cea5d9df5989be6cf1a5898114fa70ad98
• https://git.kernel.org/stable/c/76fce0ebf9c770fdf259d167eadf5f05a9bd96b0
• https://git.kernel.org/stable/c/d37a08f840485995e3fb91dad95e441b9d28a269
• https://git.kernel.org/stable/c/334b56cea5d9df5989be6cf1a5898114fa70ad98
• https://git.kernel.org/stable/c/d37a08f840485995e3fb91dad95e441b9d28a269

Get alerted when CVE-2024-26948 or the next vulnerability affects your stack