Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-50117

drm/amd: Guard against bad data for ATIF ACPI method

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Guard against bad data for ATIF ACPI method If a BIOS provides bad data in response to an ATIF method call this causes a NULL pointer dereference in the caller. ``` ? show_regs (arch/x86/kernel/dumpstack.c:478 (discriminator 1)) ? __die (arch/x86/kernel/dumpstack.c:423 arch/x86/kernel/dumpstack.c:434) ? page_fault_oops (arch/x86/mm/fault.c:544 (discriminator 2) arch/x86/mm/fault.c:705 (discriminator 2)) ? do_user_addr_fault (arch/x86/mm/fault.c:440 (discriminator 1) arch/x86/mm/fault.c:1232 (discriminator 1)) ? acpi_ut_update_object_reference (drivers/acpi/acpica/utdelete.c:642) ? exc_page_fault (arch/x86/mm/fault.c:1542) ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:387 (discriminator 2)) amdgpu ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:386 (discriminator 1)) amdgpu ``` It has been encountered on at least one system, so guard for it. (cherry picked from commit c9b7c809b89f24e9372a4e7f02d64c950b07fdee)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 58556dcbd5606a5daccaee73b2130bc16b48e025affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 43b4fa6e0e238c6e2662f4fb61d9f51c2785fb1daffected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 234682910971732cd4da96fd95946e296e486b38affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 6032287747f874b52dc8b9d7490e2799736e035faffected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < cd67af3c1762de4c2483ae4dbdd98f9ea8fa56e3affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 975ede2a7bec52b5da1428829b3439667c8a234baffected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 1d7175f9c57b1abf9ecfbdfd53ea760761f52ffeaffected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < bf58f03931fdcf7b3c45cb76ac13244477a60f44affected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 4.19.323 to ≤ 4.19.*unaffected
  • 5.4.285 to ≤ 5.4.*unaffected
  • 5.10.229 to ≤ 5.10.*unaffected
  • 5.15.170 to ≤ 5.15.*unaffected
  • 6.1.115 to ≤ 6.1.*unaffected
  • 6.6.59 to ≤ 6.6.*unaffected
  • 6.11.6 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References