CVE-2024-53201: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-27 · updated 2026-10-30
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe This commit addresses a null pointer dereference issue in dcn20_program_pipe(). Previously, commit 8e4ed3cf1642 ("drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe") partially fixed the null pointer dereference issue. However, in dcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and plane_state is accessed again through pipe_ctx. Multiple if statements directly call attributes of plane_state, leading to potential null pointer dereference issues. This patch adds necessary null checks to ensure stability.

Affected products

Linux kernel: from 6.6.64 before 6.7; from 6.11.3 before 6.11.11; from 6.12 before 6.12.2 — fixed in 6.7, 6.11.11, 6.12.2
Linux: from 6.6.64 before 6.6.160; from 6.11.3 before 6.11.11 — fixed in 6.6.160, 6.11.11

How to fix

Upgrade to a fixed version: Linux kernel 6.7, 6.11.11, 6.12.2; Linux 6.6.160, 6.11.11. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-53201 or the next vulnerability affects your stack