CVE-2024-26700: linux-libc-dev - Fix MST Null Ptr for RV
Summary
CVE-2024-26700: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV platform: BUG: kernel NULL pointer dereference, address: 00000... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling programs that use the Linux kernel's C library interface. It is an essential component for building and running applications on Linux systems. The vulnerability identified as CVE-2024-26700 affects the linux-libc-dev package, specifically in the drm/amd/display module. This vulnerability can lead to a kernel NULL pointer dereference, resulting in a system crash or potential privilege escalation.
Vulnerability Detail
The vulnerability in the drm/amd/display module of the linux-libc-dev package allows an attacker to trigger a NULL pointer dereference, leading to a system crash. This vulnerability can be exploited by a local user with low privileges, potentially escalating their privileges or causing a denial of service. The vulnerability has been fixed in the latest version of the package.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No known workaround is available for this vulnerability. It is recommended to apply the official patch or update the linux-libc-dev package to the latest version.
Conclusion
The linux-libc-dev package, specifically the drm/amd/display module, is vulnerable to a NULL pointer dereference issue. To mitigate this vulnerability, users should update their linux-libc-dev package to version 6.1.90-1 or later. No known workaround is available, and it is recommended to apply the official patch or update the package to the latest version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
Linux-libc-dev is a development package that provides header files and libraries for compiling programs that use the Linux kernel's C library interface.
The vulnerability can lead to a kernel NULL pointer dereference, resulting in a system crash or potential privilege escalation.
Users of the linux-libc-dev package, specifically those using the drm/amd/display module, are affected by this vulnerability.
To fix this vulnerability, update the linux-libc-dev package to version 6.1.90-1 or later.
No known workaround is available for this vulnerability. It is recommended to apply the official patch or update the linux-libc-dev package.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
