CVE-2024-49898

drm/amd/display: Check null-initialized variables

MEDIUM

5.5

CVSS Score

Published: October 21, 2024 at 06:01 PM UTC

Updated: June 17, 2026 at 08:00 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null-initialized variables [WHAT & HOW] drr_timing and subvp_pipe are initialized to null and they are not always assigned new values. It is necessary to check for null before dereferencing. This fixes 2 FORWARD_NULL issues reported by Coverity.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 6.10.144.15 ≤ v < 6.1.1204.15 ≤ v < 6.10.144.15 ≤ v < 6.11.34.15 ≤ v < 6.124.15 ≤ v < 6.6.646.11 ≤ v < 6.11.34.154562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c

Vendor states this is fixed in 115b1a3b0944b4d8ef0b4b0c5a625bdd9474131f (fixed)

Vendor states this is fixed in 26d262b79a3587aaa84368586a55e9026c67841b (fixed)

Vendor states this is fixed in 367cd9ceba1933b63bc1d87d967baf6d9fd241d2 (fixed)

Vendor states this is fixed in 3fc70ae048fe0936761b73b50700a810ff61e853 (fixed)

Vendor states this is fixed in c3a3b6d9a9383e3c1a4a08878ba5046e68647595 (fixed)

Vendor states this is fixed in 4.15 (unaffected)

Vendor states this is fixed in 6.1.120 (unaffected)

Vendor states this is fixed in 6.10.14 (unaffected)

Vendor states this is fixed in 6.11.3 (unaffected)

Vendor states this is fixed in 6.12 (unaffected)

Vendor states this is fixed in 6.6.64 (unaffected)