CVE-2024-50117

drm/amd: Guard against bad data for ATIF ACPI method

MEDIUM
5.5
CVSS Score
Published: November 5, 2024 at 05:10 PM UTC
Updated: August 5, 2026 at 12:05 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Guard against bad data for ATIF ACPI method If a BIOS provides bad data in response to an ATIF method call this causes a NULL pointer dereference in the caller. ``` ? show_regs (arch/x86/kernel/dumpstack.c:478 (discriminator 1)) ? __die (arch/x86/kernel/dumpstack.c:423 arch/x86/kernel/dumpstack.c:434) ? page_fault_oops (arch/x86/mm/fault.c:544 (discriminator 2) arch/x86/mm/fault.c:705 (discriminator 2)) ? do_user_addr_fault (arch/x86/mm/fault.c:440 (discriminator 1) arch/x86/mm/fault.c:1232 (discriminator 1)) ? acpi_ut_update_object_reference (drivers/acpi/acpica/utdelete.c:642) ? exc_page_fault (arch/x86/mm/fault.c:1542) ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:387 (discriminator 2)) amdgpu ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:386 (discriminator 1)) amdgpu ``` It has been encountered on at least one system, so guard for it. (cherry picked from commit c9b7c809b89f24e9372a4e7f02d64c950b07fdee)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.2 ≤ v < 4.19.3234.2 ≤ v < 5.10.2294.2 ≤ v < 5.15.1704.2 ≤ v < 5.4.2854.2 ≤ v < 6.1.1154.2 ≤ v < 6.11.64.2 ≤ v < 6.124.2 ≤ v < 6.6.594.20 ≤ v < 5.4.2855.11 ≤ v < 5.15.1705.16 ≤ v < 6.1.1155.5 ≤ v < 5.10.2296.2 ≤ v < 6.6.596.7 ≤ v < 6.11.66.12 rc16.12 rc26.12 rc36.12 rc4d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Vendor states this is fixed in 1d7175f9c57b1abf9ecfbdfd53ea760761f52ffe (fixed)
Vendor states this is fixed in 234682910971732cd4da96fd95946e296e486b38 (fixed)
Vendor states this is fixed in 43b4fa6e0e238c6e2662f4fb61d9f51c2785fb1d (fixed)
Vendor states this is fixed in 58556dcbd5606a5daccaee73b2130bc16b48e025 (fixed)
Vendor states this is fixed in 6032287747f874b52dc8b9d7490e2799736e035f (fixed)
Vendor states this is fixed in 975ede2a7bec52b5da1428829b3439667c8a234b (fixed)
Vendor states this is fixed in bf58f03931fdcf7b3c45cb76ac13244477a60f44 (fixed)
Vendor states this is fixed in cd67af3c1762de4c2483ae4dbdd98f9ea8fa56e3 (fixed)
Vendor states this is fixed in 4.19.323 (unaffected)
Vendor states this is fixed in 4.2 (unaffected)
Vendor states this is fixed in 5.10.229 (unaffected)
Vendor states this is fixed in 5.15.170 (unaffected)
Vendor states this is fixed in 5.4.285 (unaffected)
Vendor states this is fixed in 6.1.115 (unaffected)
Vendor states this is fixed in 6.11.6 (unaffected)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.6.59 (unaffected)

References (10)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1d7175f9c57b1abf9ecfbdfd53ea760761f52ffe
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/234682910971732cd4da96fd95946e296e486b38
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/43b4fa6e0e238c6e2662f4fb61d9f51c2785fb1d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/58556dcbd5606a5daccaee73b2130bc16b48e025
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6032287747f874b52dc8b9d7490e2799736e035f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/975ede2a7bec52b5da1428829b3439667c8a234b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bf58f03931fdcf7b3c45cb76ac13244477a60f44
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/cd67af3c1762de4c2483ae4dbdd98f9ea8fa56e3

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card