What’s Vulnerable › Vulnerabilities

CVE-2024-43907: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules Check the pointer value to fix potential null pointer dereference

Affected products

• Linux kernel: before 5.10.224; from 5.11 before 5.15.165; from 5.16 before 6.1.105; from 6.2 before 6.6.46; from 6.7 before 6.10.5 — fixed in 5.10.224, 5.15.165, 6.1.105, 6.10.5, 6.6.46

How to fix

Upgrade to a fixed version: Linux kernel 5.10.224, 5.15.165, 6.1.105, 6.10.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0c065e50445aea2e0a1815f12e97ee49e02cbaac
• https://git.kernel.org/stable/c/13937a40aae4efe64592ba48c057ac3c72f7fe82
• https://git.kernel.org/stable/c/3a01bf2ca9f860fdc88c358567b8fa3033efcf30
• https://git.kernel.org/stable/c/c1749313f35b98e2e655479f037db37f19756622
• https://git.kernel.org/stable/c/d19fb10085a49b77578314f69fff21562f7cd054
• https://git.kernel.org/stable/c/e04d18c29954441aa1054af649f957ffad90a201
• https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Get alerted when CVE-2024-43907 or the next vulnerability affects your stack