What’s Vulnerable › Vulnerabilities

CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-12 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 [Why] Commit: - commit 5aa1dfcdf0a4 ("drm/mst: Refactor the flow for payload allocation/removement") accidently overwrite the commit - commit 54d217406afe ("drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2") which cause regression. [How] Recover the original NULL fix and remove the unnecessary input parameter 'state' for drm_dp_add_payload_part2(). (cherry picked from commit 4545614c1d8da603e57b60dd66224d81b6ffc305)

Affected products

• Linux kernel: from 6.7 before 6.9.6 — fixed in 6.9.6

How to fix

Upgrade to a fixed version: Linux kernel 6.9.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/5a507b7d2be15fddb95bf8dee01110b723e2bcd9
• https://git.kernel.org/stable/c/8e21de5f99b2368a5155037ce0aae8aaba3f5241
• https://git.kernel.org/stable/c/5a507b7d2be15fddb95bf8dee01110b723e2bcd9
• https://git.kernel.org/stable/c/8e21de5f99b2368a5155037ce0aae8aaba3f5241

Get alerted when CVE-2024-39498 or the next vulnerability affects your stack