CVE-2024-26672

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-26672
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26672.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26672
Downstream
Published
2024-04-02T06:49:14Z
Modified
2025-10-21T18:31:41.401355Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix variable 'mcafuncs' dereferenced before NULL check in 'amdgpumcasmugetmcaentry()'

Fixes the below:

drivers/gpu/drm/amd/amdgpu/amdgpumca.c:377 amdgpumcasmugetmcaentry() warn: variable dereferenced before check 'mca_funcs' (see line 368)

357 int amdgpumcasmugetmcaentry(struct amdgpudevice *adev, enum amdgpumcaerrortype type, 358 int idx, struct mcabankentry *entry) 359 { 360 const struct amdgpumcasmufuncs *mcafuncs = adev->mca.mcafuncs; 361 int count; 362 363 switch (type) { 364 case AMDGPUMCAERRORTYPEUE: 365 count = mcafuncs->maxue_count;

mca_funcs is dereferenced here.

366 break; 367 case AMDGPUMCAERRORTYPECE: 368 count = mcafuncs->maxce_count;

mca_funcs is dereferenced here.

369 break; 370 default: 371 return -EINVAL; 372 } 373 374 if (idx >= count) 375 return -EINVAL; 376 377 if (mcafuncs && mcafuncs->mcagetmca_entry) ^^^^^^^^^

Checked too late!

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Fixed
7b5d58c07024516c0e81b95e98f37710cf402c53
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Fixed
4f32504a2f85a7b40fe149436881381f48e9c0c0

Affected versions

v4.*

v4.1
v4.1-rc7
v4.1-rc8
v4.10
v4.10-rc1
v4.10-rc2
v4.10-rc3
v4.10-rc4
v4.10-rc5
v4.10-rc6
v4.10-rc7
v4.10-rc8
v4.11
v4.11-rc1
v4.11-rc2
v4.11-rc3
v4.11-rc4
v4.11-rc5
v4.11-rc6
v4.11-rc7
v4.11-rc8
v4.12
v4.12-rc1
v4.12-rc2
v4.12-rc3
v4.12-rc4
v4.12-rc5
v4.12-rc6
v4.12-rc7
v4.13
v4.13-rc1
v4.13-rc2
v4.13-rc3
v4.13-rc4
v4.13-rc5
v4.13-rc6
v4.13-rc7
v4.14
v4.14-rc1
v4.14-rc2
v4.14-rc3
v4.14-rc4
v4.14-rc5
v4.14-rc6
v4.14-rc7
v4.14-rc8
v4.15
v4.15-rc1
v4.15-rc2
v4.15-rc3
v4.15-rc4
v4.15-rc5
v4.15-rc6
v4.15-rc7
v4.15-rc8
v4.15-rc9
v4.16
v4.16-rc1
v4.16-rc2
v4.16-rc3
v4.16-rc4
v4.16-rc5
v4.16-rc6
v4.16-rc7
v4.17
v4.17-rc1
v4.17-rc2
v4.17-rc3
v4.17-rc4
v4.17-rc5
v4.17-rc6
v4.17-rc7
v4.18
v4.18-rc1
v4.18-rc2
v4.18-rc3
v4.18-rc4
v4.18-rc5
v4.18-rc6
v4.18-rc7
v4.18-rc8
v4.19
v4.19-rc1
v4.19-rc2
v4.19-rc3
v4.19-rc4
v4.19-rc5
v4.19-rc6
v4.19-rc7
v4.19-rc8
v4.2
v4.2-rc1
v4.2-rc2
v4.2-rc3
v4.2-rc4
v4.2-rc5
v4.2-rc6
v4.2-rc7
v4.2-rc8
v4.20
v4.20-rc1
v4.20-rc2
v4.20-rc3
v4.20-rc4
v4.20-rc5
v4.20-rc6
v4.20-rc7
v4.3
v4.3-rc1
v4.3-rc2
v4.3-rc3
v4.3-rc4
v4.3-rc5
v4.3-rc6
v4.3-rc7
v4.4
v4.4-rc1
v4.4-rc2
v4.4-rc3
v4.4-rc4
v4.4-rc5
v4.4-rc6
v4.4-rc7
v4.4-rc8
v4.5
v4.5-rc1
v4.5-rc2
v4.5-rc3
v4.5-rc4
v4.5-rc5
v4.5-rc6
v4.5-rc7
v4.6
v4.6-rc1
v4.6-rc2
v4.6-rc3
v4.6-rc4
v4.6-rc5
v4.6-rc6
v4.6-rc7
v4.7
v4.7-rc1
v4.7-rc2
v4.7-rc3
v4.7-rc4
v4.7-rc5
v4.7-rc6
v4.7-rc7
v4.8
v4.8-rc1
v4.8-rc2
v4.8-rc3
v4.8-rc4
v4.8-rc5
v4.8-rc6
v4.8-rc7
v4.8-rc8
v4.9
v4.9-rc1
v4.9-rc2
v4.9-rc3
v4.9-rc4
v4.9-rc5
v4.9-rc6
v4.9-rc7
v4.9-rc8

v5.*

v5.0
v5.0-rc1
v5.0-rc2
v5.0-rc3
v5.0-rc4
v5.0-rc5
v5.0-rc6
v5.0-rc7
v5.0-rc8
v5.1
v5.1-rc1
v5.1-rc2
v5.1-rc3
v5.1-rc4
v5.1-rc5
v5.1-rc6
v5.1-rc7
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.2
v5.2-rc1
v5.2-rc2
v5.2-rc3
v5.2-rc4
v5.2-rc5
v5.2-rc6
v5.2-rc7
v5.3
v5.3-rc1
v5.3-rc2
v5.3-rc3
v5.3-rc4
v5.3-rc5
v5.3-rc6
v5.3-rc7
v5.3-rc8
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.2
v6.7.3

Database specific

vanir_signatures

[
    {
        "id": "CVE-2024-26672-0d6691b2",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f32504a2f85a7b40fe149436881381f48e9c0c0",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "amdgpu_mca_smu_get_mca_entry",
            "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c"
        },
        "digest": {
            "length": 485.0,
            "function_hash": "208040565567925268128484526407904999733"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-26672-92150b29",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f32504a2f85a7b40fe149436881381f48e9c0c0",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "291807511446175026465162996719762352833",
                "142565068778779082533873855242900182647",
                "124521928328595382216312832849322021755",
                "316388841235666400501530866690539091047",
                "84309369830240284013253637398357754620",
                "122929251067303643592806107525223353890",
                "139857048210855263221099613017612909921",
                "143799055775292398652002753506447870769",
                "320256429935366176040553867840100570895"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-26672-c478d267",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b5d58c07024516c0e81b95e98f37710cf402c53",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "291807511446175026465162996719762352833",
                "142565068778779082533873855242900182647",
                "124521928328595382216312832849322021755",
                "316388841235666400501530866690539091047",
                "84309369830240284013253637398357754620",
                "122929251067303643592806107525223353890",
                "139857048210855263221099613017612909921",
                "143799055775292398652002753506447870769",
                "320256429935366176040553867840100570895"
            ]
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-26672-cf39953b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b5d58c07024516c0e81b95e98f37710cf402c53",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "amdgpu_mca_smu_get_mca_entry",
            "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c"
        },
        "digest": {
            "length": 485.0,
            "function_hash": "208040565567925268128484526407904999733"
        },
        "signature_type": "Function"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.2.0
Fixed
6.7.4