What’s Vulnerable › Vulnerabilities

CVE-2024-43905: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr Check return value and conduct null pointer handling to avoid null pointer dereference.

Affected products

• Linux kernel: before 6.1.105; from 6.2 before 6.6.46; from 6.7 before 6.10.5 — fixed in 6.1.105, 6.10.5, 6.6.46

How to fix

Upgrade to a fixed version: Linux kernel 6.1.105, 6.10.5, 6.6.46. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0fa11f9df96217c2785b040629ff1a16900fb51c
• https://git.kernel.org/stable/c/2ac9deb7e087f0b461c3559d9eaa6b9cf19d3fa8
• https://git.kernel.org/stable/c/2e538944996d0dd497faf8ee81f8bfcd3aca7d80
• https://git.kernel.org/stable/c/50151b7f1c79a09117837eb95b76c2de76841dab
• https://git.kernel.org/stable/c/69a441473fec2fc2aa2cf56122d6c42c4266a239
• https://git.kernel.org/stable/c/c2629daf218a325f4d69754452cd42fe8451c15b
• https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Get alerted when CVE-2024-43905 or the next vulnerability affects your stack