Null Pointer Dereference in Linux Kernel's DRM MSM Adreno - CVE-2024-49901
Summary
CVE-2024-49901: In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs There are some cases, such as the one uncovered by Commit 46d4efcccc68 ("drm/msm/a6xx: Av... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system resources. The Direct Rendering Manager (DRM) is a subsystem of the Linux kernel responsible for interfacing with GPUs, enabling graphics rendering. The MSM (Mobile Station Modem) driver supports Qualcomm Adreno GPUs, which are widely used in mobile devices. This vulnerability affects the initialization sequence of the GPU driver, potentially leading to system instability.
Vulnerability Detail
CVE-2024-49901 is a vulnerability in the Linux kernel's DRM MSM Adreno driver, where the 'msm_gpu->pdev' pointer is not assigned early enough during the GPU initialization process. This oversight can lead to null pointer dereferences when certain conditions are met, such as missing hardware support data. The vulnerability can cause crashes or unexpected behavior in systems utilizing affected GPU drivers, impacting overall system reliability and user experience.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2024-49901 is a significant vulnerability in the Linux kernel's DRM MSM Adreno driver that can lead to system instability due to null pointer dereferences. Users are advised to update their systems promptly to mitigate the risks associated with this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2024-49901 is a vulnerability in the Linux kernel's DRM MSM Adreno driver that can lead to null pointer dereferences during GPU initialization.
This vulnerability can cause system crashes or instability when using affected GPU drivers, particularly in mobile devices.
If you are using a version of the Linux kernel that includes the DRM MSM Adreno driver, you may be affected. Use tools like Vulert to check for vulnerabilities in your application.
The best protection is to update your Linux kernel to the latest patched version as soon as it is available.
Detailed information can be found in the official security advisories for the Linux kernel and on vulnerability databases like CVE and Vulert.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
