In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: avoid using null object of framebuffer
Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drmgemfbgetobj() and return error code when object is null to avoid using null object of framebuffer.
(cherry picked from commit 73dd0ad9e5dad53766ea3e631303430116f834b3)
{ "vanir_signatures": [ { "signature_version": "v1", "target": { "function": "dm_plane_helper_prepare_fb", "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@093ee72ed35c2338c87c26b6ba6f0b7789c9e14e", "deprecated": false, "digest": { "length": 1692.0, "function_hash": "147358039391722122436749652372310483792" }, "id": "CVE-2024-46694-0f5ffa63" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@093ee72ed35c2338c87c26b6ba6f0b7789c9e14e", "deprecated": false, "digest": { "line_hashes": [ "168004778867592309987248684276116437982", "185545135881927617767731373451741631298", "207016104401418341400517349480870182817", "254372569551580187896012143846942446384", "211228874862794196514296866241080495916", "301827764220488645671074577582536499513", "66722675734989667049826019966446965630", "208507729307649963039044232736789322764", "200593147579751600640833527590914126312", "311113482108786625844263367261975771123" ], "threshold": 0.9 }, "id": "CVE-2024-46694-a3b9fdee" }, { "signature_version": "v1", "target": { "function": "amdgpu_dm_plane_helper_prepare_fb", "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9a33235c773c7a3768060cf1d2cf8a9153bc37", "deprecated": false, "digest": { "length": 1692.0, "function_hash": "147358039391722122436749652372310483792" }, "id": "CVE-2024-46694-b1a5083a" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9a33235c773c7a3768060cf1d2cf8a9153bc37", "deprecated": false, "digest": { "line_hashes": [ "168004778867592309987248684276116437982", "185545135881927617767731373451741631298", "207016104401418341400517349480870182817", "254372569551580187896012143846942446384", "211228874862794196514296866241080495916", "301827764220488645671074577582536499513", "66722675734989667049826019966446965630", "208507729307649963039044232736789322764", "200593147579751600640833527590914126312", "311113482108786625844263367261975771123" ], "threshold": 0.9 }, "id": "CVE-2024-46694-c249be19" } ] }