CVE-2024-38390

Source
https://cve.org/CVERecord?id=CVE-2024-38390
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38390.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-38390
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
OESA (1)
SUSE (8)
UBUNTU (1)
Related
Published
2024-06-21T10:18:13Z
Modified
2026-10-08T02:48:31Z
Summary
drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails

Calling a6xx_destroy() before adreno_gpu_init() leads to a null pointer dereference on:

msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL);

as gpu->pdev is only assigned in:

a6xx_gpu_init() |_ adreno_gpu_init |_ msm_gpu_init()

Instead of relying on handwavy null checks down the cleanup chain, explicitly de-allocate the LLC data and free a6xx_gpu instead.

Patchwork: https://patchwork.freedesktop.org/patch/588919/

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38390.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
76efc2453d0e8e5d6692ef69981b183ad674edea
Fixed
247849eeb3fd88f8990ed73e33af70d5c10f9aec
Fixed
a1955a6df91355fef72a3a254700acd3cc1fec0d
Fixed
617e3d1680504a3f9d88e1582892c68be155498f
Fixed
46d4efcccc688cbacdd70a238bedca510acaa8e4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.0.10
Fixed
6.1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5fea4202b5faccfc6449381a299e8ce4b994d666

Affected versions

v6.*
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.14
v6.0.15
v6.0.16
v6.0.17
v6.0.18
v6.0.19

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38390.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.93
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.33
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38390.json"