NULL Pointer Dereference in Linux Kernel's AMD Display Driver
Summary
CVE-2024-46808: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range [Why & How] ASSERT if return NULL from kcalloc. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of hardware architectures and is known for its stability and performance. The AMD display driver within the Linux kernel is responsible for managing graphics output and ensuring compatibility with AMD graphics hardware. This vulnerability affects the driver by introducing a potential NULL pointer dereference, which can lead to system instability or crashes.
Vulnerability Detail
In the Linux kernel, specifically within the AMD display driver, a vulnerability has been identified where a missing NULL pointer check in the function 'dpcd_extend_address_range' can lead to an assertion failure if the function returns NULL from 'kcalloc'. This can result in unexpected behavior, including system crashes or instability, particularly when the driver attempts to access memory that has not been properly allocated. This issue is critical as it can affect the overall reliability of systems utilizing AMD graphics hardware.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the kernel update as soon as it becomes available.
Conclusion
The CVE-2024-46808 vulnerability in the Linux kernel's AMD display driver poses a significant risk of system instability due to a NULL pointer dereference. Users are encouraged to update their systems promptly to mitigate this risk and ensure the reliability of their graphics hardware.
See every vulnerability recorded for linux →
FAQ
CVE-2024-46808 is a vulnerability in the Linux kernel's AMD display driver that can lead to a NULL pointer dereference, potentially causing system crashes.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to system instability, crashes, and unexpected behavior when using AMD graphics hardware.
Yes, a patch is available in newer versions of the Linux kernel. Users are advised to update their kernel to the latest version.
While there are no specific workarounds, it is recommended to monitor your system for unusual behavior and apply the update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
