CVE-2024-38546

drm: vc4: Fix possible null pointer dereference

MEDIUM

5.5

CVSS Score

Published: June 19, 2024 at 01:35 PM UTC

Updated: June 17, 2026 at 07:40 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address() may return NULL which is later dereferenced. Fix this bug by adding NULL check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.12 ≤ v < 5.10.2194.12 ≤ v < 5.15.1614.12 ≤ v < 6.1.934.12 ≤ v < 6.104.12 ≤ v < 6.6.334.12 ≤ v < 6.8.124.12 ≤ v < 6.9.35.11 ≤ v < 5.15.1615.16 ≤ v < 6.1.936.2 ≤ v < 6.6.336.7 ≤ v < 6.8.126.9 ≤ v < 6.9.34.12bb7d78568814a31a11fa14f1479a9fe51f1582ad

Vendor states this is fixed in 2a345fe928c21de6f3c3c7230ff509d715153a31 (fixed)

Vendor states this is fixed in 2d9adecc88ab678785b581ab021f039372c324cb (fixed)

Vendor states this is fixed in 42c22b63056cea259d5313bf138a834840af85a5 (fixed)

Vendor states this is fixed in 6cf1874aec42058a5ad621a23b5b2f248def0e96 (fixed)

Vendor states this is fixed in 80431ea3634efb47a3004305d76486db9dd8ed49 (fixed)

Vendor states this is fixed in bd7827d46d403f8cdb43d16744cb1114e4726b21 (fixed)

Vendor states this is fixed in c534b63bede6cb987c2946ed4d0b0013a52c5ba7 (fixed)

Vendor states this is fixed in 4.12 (unaffected)

Vendor states this is fixed in 5.10.219 (unaffected)

Vendor states this is fixed in 5.15.161 (unaffected)

Vendor states this is fixed in 6.1.93 (unaffected)

Vendor states this is fixed in 6.10 (unaffected)