Critical Null-Pointer Dereference in Linux Kernel - Package: linux
Summary
DEBIAN-CVE-2024-26728: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix null-pointer dereference on edid reading Use i2c adapter when there isn't aux_mode in dc_link to fix a null-pointer derefence that... Affects linux versions < 6.7.7-1. Fixed in 6.7.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for all other parts of the system. It manages hardware resources, system calls, and process management. The vulnerability in question affects the Linux kernel versions in Debian 13 and 14, specifically related to the AMD display driver, which can lead to system instability and crashes.
Vulnerability Detail
In the Linux kernel, a null-pointer dereference vulnerability was identified in the AMD display driver. This issue arises when the system attempts to read Extended Display Identification Data (EDID) without a proper i2c adapter, leading to a crash. The vulnerability can be triggered when running specific tests on systems with DCN2.1 and HDMI connectors, resulting in a kernel panic and potential data loss.
How To Fix
Minimum fixed version
6.7.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid running tests that trigger the null-pointer dereference, particularly those involving HDMI connectors and EDID reading, until the package is updated.
Conclusion
The identified null-pointer dereference vulnerability in the Linux kernel poses significant risks to system stability and data integrity. Users are strongly advised to update their linux package to the latest patched version to mitigate these risks. For ongoing monitoring of vulnerabilities, consider using Vulert, which provides real-time alerts based on your software's manifest file.
See every vulnerability recorded for linux →
FAQ
A null-pointer dereference occurs when a program attempts to access memory at an address that is not valid, leading to crashes or unexpected behavior.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to install any software.
This vulnerability affects Debian 13 and 14 systems running the linux package versions prior to 6.7.7-1.
Yes, triggering this vulnerability can lead to kernel panics, which may result in data loss if not handled properly.
If you cannot update immediately, avoid running tests that may trigger the vulnerability, especially those involving HDMI connectors.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
