Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-50156

drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() If the allocation in msm_disp_state_dump_regs() failed then `block->state` can be NULL. The msm_disp_state_print_regs() function _does_ have code to try to handle it with: if (*reg) dump_addr = *reg; ...but since "dump_addr" is initialized to NULL the above is actually a noop. The code then goes on to dereference `dump_addr`. Make the function print "Registers not stored" when it sees a NULL to solve this. Since we're touching the code, fix msm_disp_state_print_regs() not to pointlessly take a double-pointer and properly mark the pointer as `const`. Patchwork: https://patchwork.freedesktop.org/patch/619657/

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 98659487b845c05b6bed85d881713545db674c7c to < 42cf045086feae77b212f0f66e742b91a5b566b7affected
  • 98659487b845c05b6bed85d881713545db674c7c to < e8e9f2a12a6214080c8ea83220a596f6e1dedc6caffected
  • 98659487b845c05b6bed85d881713545db674c7c to < f7ad916273483748582d97cfa31054ccb19224f3affected
  • 98659487b845c05b6bed85d881713545db674c7c to < 563aa81fd66a4e7e6e551a0e02bcc23957cafe2faffected
  • 98659487b845c05b6bed85d881713545db674c7c to < 293f53263266bc4340d777268ab4328a97f041faaffected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.170 to ≤ 5.15.*unaffected
  • 6.1.115 to ≤ 6.1.*unaffected
  • 6.6.59 to ≤ 6.6.*unaffected
  • 6.11.6 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References