CVE-2024-53200
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 8, 2025
CWE ID 476
Summary
CVE-2024-53200 is a newly identified vulnerability affecting the Linux kernel. The issue resides in the drm/amd/display driver and specifically in the function hwss_setup_dpp(). A null pointer dereference can occur when pipe_ctx->plane_state is not properly checked for null values before being accessed. This flaw could lead to a kernel crash and potential attacker privilege escalation. The vulnerability has been mitigated with a commit that adds a null check to prevent such occurrences.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX