In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add NULL test for 'timing generator' in 'dcn21setpipe()'
In "u32 otginst = pipectx->streamres.tg->inst;" pipectx->stream_res.tg could be NULL, it is relying on the caller to ensure the tg is not NULL.
{ "vanir_signatures": [ { "signature_version": "v1", "target": { "function": "dcn21_set_pipe", "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f24c08363af1cd945abad84e3c87fd3e3c845a", "deprecated": false, "digest": { "length": 550.0, "function_hash": "172753256738309606028080363895692116654" }, "id": "CVE-2024-26661-012a7cac" }, { "signature_version": "v1", "target": { "function": "dcn21_set_pipe", "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66951d98d9bf45ba25acf37fe0747253fafdf298", "deprecated": false, "digest": { "length": 550.0, "function_hash": "172753256738309606028080363895692116654" }, "id": "CVE-2024-26661-2cd2a2e6" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hwseq.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3c237a706580326d3b7a1b97697e5031ca4667", "deprecated": false, "digest": { "line_hashes": [ "103459866379634607185666535213224106915", "302860587404737845960496624366546939615", "58051394791945270381505582628593632686", "5114128034712627421033506101768396261", "121767330996908351713667860294906191972", "204698591387138702403514004413830999974", "314262770337960440266272306067486439303", "138003695621119368038317959435475556729", "15343918234309188418029888442821938614", "71644065300810048258874436346543864895", "90236364334416624073531632030626196993", "83288493378605872441637195668091726838", "336751798893247152623508245971211355788", "228067341677539797223977987191154258924", "155410406764649433546052315855737208621", "134738607091744254887250322502221628324", "39476447032936911524909802581216549778", "94533454769271157054387361397887667225", "261899446754222989368043374533094959015", "128999502843850703382194775109254084785", "245230569419630055200783197253981279873", "142756719365307059617442292294672670107", "338224859108277854122735399123194226775" ], "threshold": 0.9 }, "id": "CVE-2024-26661-335e59c7" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66951d98d9bf45ba25acf37fe0747253fafdf298", "deprecated": false, "digest": { "line_hashes": [ "103459866379634607185666535213224106915", "302860587404737845960496624366546939615", "58051394791945270381505582628593632686", "5114128034712627421033506101768396261", "121767330996908351713667860294906191972", "204698591387138702403514004413830999974", "314262770337960440266272306067486439303", "138003695621119368038317959435475556729", "15343918234309188418029888442821938614", "71644065300810048258874436346543864895", "90236364334416624073531632030626196993", "83288493378605872441637195668091726838", "336751798893247152623508245971211355788", "228067341677539797223977987191154258924", "155410406764649433546052315855737208621", "134738607091744254887250322502221628324", "39476447032936911524909802581216549778", "94533454769271157054387361397887667225", "261899446754222989368043374533094959015", "128999502843850703382194775109254084785", "245230569419630055200783197253981279873", "142756719365307059617442292294672670107", "338224859108277854122735399123194226775" ], "threshold": 0.9 }, "id": "CVE-2024-26661-44689028" }, { "signature_version": "v1", "target": { "function": "dcn21_set_pipe", "file": "drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hwseq.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3c237a706580326d3b7a1b97697e5031ca4667", "deprecated": false, "digest": { "length": 550.0, "function_hash": "172753256738309606028080363895692116654" }, "id": "CVE-2024-26661-83fca6e1" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f24c08363af1cd945abad84e3c87fd3e3c845a", "deprecated": false, "digest": { "line_hashes": [ "103459866379634607185666535213224106915", "302860587404737845960496624366546939615", "58051394791945270381505582628593632686", "5114128034712627421033506101768396261", "121767330996908351713667860294906191972", "204698591387138702403514004413830999974", "314262770337960440266272306067486439303", "138003695621119368038317959435475556729", "15343918234309188418029888442821938614", "71644065300810048258874436346543864895", "90236364334416624073531632030626196993", "83288493378605872441637195668091726838", "336751798893247152623508245971211355788", "228067341677539797223977987191154258924", "155410406764649433546052315855737208621", "134738607091744254887250322502221628324", "39476447032936911524909802581216549778", "94533454769271157054387361397887667225", "261899446754222989368043374533094959015", "128999502843850703382194775109254084785", "245230569419630055200783197253981279873", "142756719365307059617442292294672670107", "338224859108277854122735399123194226775" ], "threshold": 0.9 }, "id": "CVE-2024-26661-e80934a3" } ] }