What’s Vulnerable › Vulnerabilities

CVE-2024-47704: drm/amd/display: Check link_res->hpo_dp_link_enc before using it

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-21 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_res->hpo_dp_link_enc before using it [WHAT & HOW] Functions dp_enable_link_phy and dp_disable_link_phy can pass link_res without initializing hpo_dp_link_enc and it is necessary to check for null before dereferencing. This fixes 2 FORWARD_NULL issues reported by Coverity.

Affected products

• Linux kernel: before 6.6.55; from 6.7 before 6.10.14; from 6.11 before 6.11.2 — fixed in 6.10.14, 6.11.2, 6.6.55

How to fix

Upgrade to a fixed version: Linux kernel 6.10.14, 6.11.2, 6.6.55. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0508a4e95ac1aefd851ceb97ea050d8abb93262c
• https://git.kernel.org/stable/c/0beca868cde8742240cd0038141c30482d2b7eb8
• https://git.kernel.org/stable/c/530e29452b955c30cf2102fa4d07420dc6e0c953
• https://git.kernel.org/stable/c/8c22a62288194f072eb3a51045b700fce1c18d9e
• https://git.kernel.org/stable/c/be2ca7a2c1561390d28bf2f92654d819659ba510
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html

Get alerted when CVE-2024-47704 or the next vulnerability affects your stack