CVE-2024-46714

drm/amd/display: Skip wbscl_set_scaler_filter if filter is null

MEDIUM
5.5
CVSS Score
Published: September 18, 2024 at 06:32 AM UTC
Updated: June 17, 2026 at 07:55 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbscl_set_scaler_filter if filter is null Callers can pass null in filter (i.e. from returned from the function wbscl_get_filter_coeffs_16p) and a null check is added to ensure that is not the case. This fixes 4 NULL_RETURNS issues reported by Coverity.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.4.2844.15 ≤ v < 5.10.2264.15 ≤ v < 5.15.1674.15 ≤ v < 5.4.2844.15 ≤ v < 6.1.1094.15 ≤ v < 6.10.94.15 ≤ v < 6.114.15 ≤ v < 6.6.505.11 ≤ v < 5.15.1675.16 ≤ v < 6.1.1095.5 ≤ v < 5.10.2266.2 ≤ v < 6.6.506.7 ≤ v < 6.10.94.154562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c
Vendor states this is fixed in 0364f1f17a86d89dc39040beea4f099e60189f1b (fixed)
Vendor states this is fixed in 1726914cb17cedab233820d26b86764dc08857b4 (fixed)
Vendor states this is fixed in 54834585e91cab13e9f82d3a811deb212a4df786 (fixed)
Vendor states this is fixed in 6d94c05a13fadd80c3e732f14c83b2632ebfaa50 (fixed)
Vendor states this is fixed in c083c8be6bdd046049884bec076660d4ec9a19ca (fixed)
Vendor states this is fixed in c4d31653c03b90e51515b1380115d1aedad925dd (fixed)
Vendor states this is fixed in e3a95f29647ae45d1ec9541cd7df64f40bf2120a (fixed)
Vendor states this is fixed in 4.15 (unaffected)
Vendor states this is fixed in 5.10.226 (unaffected)
Vendor states this is fixed in 5.15.167 (unaffected)
Vendor states this is fixed in 5.4.284 (unaffected)
Vendor states this is fixed in 6.1.109 (unaffected)
Vendor states this is fixed in 6.10.9 (unaffected)
Vendor states this is fixed in 6.11 (unaffected)
Vendor states this is fixed in 6.6.50 (unaffected)

References (9)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0364f1f17a86d89dc39040beea4f099e60189f1b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1726914cb17cedab233820d26b86764dc08857b4
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/54834585e91cab13e9f82d3a811deb212a4df786
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6d94c05a13fadd80c3e732f14c83b2632ebfaa50
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c083c8be6bdd046049884bec076660d4ec9a19ca
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c4d31653c03b90e51515b1380115d1aedad925dd
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e3a95f29647ae45d1ec9541cd7df64f40bf2120a
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card