In the Linux kernel, the following vulnerability has been resolved:
drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
In cdnsmhdpatomicenable(), the return value of drmmodeduplicate() is assigned to mhdpstate->currentmode, and there is a dereference of it in drmmodesetname(), which will lead to a NULL pointer dereference on failure of drmmodeduplicate().
Fix this bug add a check of mhdpstate->currentmode.
[
{
"target": {
"file": "drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c"
},
"digest": {
"line_hashes": [
"143918031765336764188579481225290977096",
"38339064081932897769472201629699759535",
"280757424021944395175237678439080680916",
"146875371170135593030185335362099065317"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca53b7efd4ba6ae92fd2b3085cb099c745e96965",
"deprecated": false,
"id": "CVE-2024-38548-032b1611",
"signature_version": "v1",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c",
"function": "cdns_mhdp_atomic_enable"
},
"digest": {
"length": 1548.0,
"function_hash": "167932855042634149992045001248473428073"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85d1a27402f81f2e04b0e67d20f749c2a14edbb3",
"deprecated": false,
"id": "CVE-2024-38548-425686aa",
"signature_version": "v1",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c"
},
"digest": {
"line_hashes": [
"143918031765336764188579481225290977096",
"38339064081932897769472201629699759535",
"280757424021944395175237678439080680916",
"146875371170135593030185335362099065317"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47889711da20be9b43e1e136e5cb68df37cbcc79",
"deprecated": false,
"id": "CVE-2024-38548-8d07c701",
"signature_version": "v1",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c"
},
"digest": {
"line_hashes": [
"143918031765336764188579481225290977096",
"38339064081932897769472201629699759535",
"280757424021944395175237678439080680916",
"146875371170135593030185335362099065317"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85d1a27402f81f2e04b0e67d20f749c2a14edbb3",
"deprecated": false,
"id": "CVE-2024-38548-9de05442",
"signature_version": "v1",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c",
"function": "cdns_mhdp_atomic_enable"
},
"digest": {
"length": 1801.0,
"function_hash": "319758042851295556584793716274466428860"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca53b7efd4ba6ae92fd2b3085cb099c745e96965",
"deprecated": false,
"id": "CVE-2024-38548-cfa21953",
"signature_version": "v1",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c",
"function": "cdns_mhdp_atomic_enable"
},
"digest": {
"length": 1801.0,
"function_hash": "319758042851295556584793716274466428860"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47889711da20be9b43e1e136e5cb68df37cbcc79",
"deprecated": false,
"id": "CVE-2024-38548-fa94e4ce",
"signature_version": "v1",
"signature_type": "Function"
}
]