CVE-2024-26729

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 3, 2024
Updated: Jan 7, 2025
CWE ID 476

Summary

CVE-2024-26729 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the drm/amd/display module, specifically in the dc_dmub_srv functions. These functions contained null pointer dereferences, which could lead to a null pointer dereference if 'dc_dmub_srv' is null. The fix involves moving the null checks for 'dc_dmub_srv' to the beginning of the functions to ensure it is not null before dereferencing. This vulnerability was identified using the smatch tool, which flagged two instances in drivers/gpu/drm/amd/amdgpu/display/dc/dc_dmub_srv.c.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share