CVE-2024-26647

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Mar 26, 2024
Updated: Jan 7, 2025
CWE ID 476

Summary

CVE-2024-26647 is a vulnerability affecting the Linux kernel that has been addressed. In the function "link_set_dsc_pps_packet()" of the file "drivers/gpu/drm/amd/amdgpu/../display/dc/link/link_dpms.c", a NULL pointer check was missing before dereferencing 'struct display_stream_compressor *dsc'. This issue led to a late dereference of 'dsc' in the line DC_LOGGER_INIT(dsc->ctx->logger), potentially resulting in undefined behavior or application crashes. The vulnerability has been rectified to include the necessary pointer validation before dereferencing.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share