What’s Vulnerable › Vulnerabilities

CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-21 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check phantom_stream before it is used dcn32_enable_phantom_stream can return null, so returned value must be checked before used. This fixes 1 NULL_RETURNS issue reported by Coverity.

Affected products

• Linux kernel: before 6.10.14; from 6.11 before 6.11.3 — fixed in 6.10.14, 6.11.3

How to fix

Upgrade to a fixed version: Linux kernel 6.10.14, 6.11.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1decf695ce08e23d9ded6ce83d121b2282ce9899
• https://git.kernel.org/stable/c/3718a619a8c0a53152e76bb6769b6c414e1e83f4
• https://git.kernel.org/stable/c/3ba1219e299ab5462b5cb374c2fa2a67af0ea190
• https://git.kernel.org/stable/c/d247af7c5dbf143ad6be8179bb1550e76d6af57e
• https://git.kernel.org/stable/c/db1d7e1794fed62ee16d6a72a85997bb069e2e27
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Get alerted when CVE-2024-49897 or the next vulnerability affects your stack