CVE-2024-36897: Vulnerability in linux-libc-dev package - Atom Integrated System Info v2_2 for DCN35
Summary
CVE-2024-36897: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package for the Linux kernel. It provides the necessary headers and libraries for compiling and building kernel modules. This package is essential for developers who are working on Linux kernel-related projects. The vulnerability affects version 6.1.90-1 of the linux-libc-dev package.
Vulnerability Detail
The vulnerability, identified as CVE-2024-36897, is related to the drm/amd/display component in the Linux kernel. Specifically, it involves the Atom Integrated System Info v2_2 for DCN35. The issue arises from a null dereference when accessing Ctx->dc_bios->integrated_info, which was NULL. This vulnerability could potentially lead to a system crash or other unexpected behavior. The vulnerability has been resolved by introducing a fix that addresses the null dereference issue.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. Users are advised to apply the fix by updating the linux-libc-dev package to the recommended version.
Conclusion
The vulnerability in the linux-libc-dev package, specifically related to the Atom Integrated System Info v2_2 for DCN35, has been addressed through a fix. Users are advised to update their linux-libc-dev package to the recommended version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package is a development package for the Linux kernel. It provides the necessary headers and libraries for compiling and building kernel modules.
The vulnerability could potentially lead to a system crash or other unexpected behavior.
To fix this vulnerability, users should update their linux-libc-dev package to a version that includes the fix. The recommended version is 6.1.90-1 or later.
Users can obtain the updated package from the official Debian repositories or through the package manager of their Debian-based distribution.
Regularly updating packages ensures that the latest security fixes are applied, reducing the risk of vulnerabilities being exploited.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
