In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null check for toppipetoprogram in commitplanesforstream
This commit addresses a null pointer dereference issue in the
commit_planes_for_stream function at line 4140. The issue could occur
when top_pipe_to_program is null.
The fix adds a check to ensure top_pipe_to_program is not null before
accessing its stream_res. This prevents a null pointer dereference.
Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/core/dc.c:4140 commitplanesforstream() error: we previously assumed 'toppipetoprogram' could be null (see line 3906)
[
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c"
},
"digest": {
"line_hashes": [
"158209787002786058381581326101379436810",
"67388869434297064680768095277677597978",
"280360173721593342957417258541725977616",
"294321438166046732093028274234024301438"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ebfa6663807c144be8c8b6727375012409d2356",
"signature_version": "v1",
"id": "CVE-2024-49913-0b7164e7"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c"
},
"digest": {
"line_hashes": [
"197282418047060926150547054311221227846",
"55475931431879177025656987968037770137",
"280360173721593342957417258541725977616",
"294321438166046732093028274234024301438"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d71a72539e173a9b00ca0b1852cbaa5f5bf1ad",
"signature_version": "v1",
"id": "CVE-2024-49913-0fb7f1c9"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c",
"function": "commit_planes_for_stream"
},
"digest": {
"length": 9405.0,
"function_hash": "144280653338735225896953082325680540417"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40193ff73630adf76bc0d82398f7d90fb576dba4",
"signature_version": "v1",
"id": "CVE-2024-49913-4ddc270b"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c",
"function": "commit_planes_for_stream"
},
"digest": {
"length": 9368.0,
"function_hash": "120218404988421202704154410245979026253"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3929e382e4758aff42da0102a60d13337c99d3b8",
"signature_version": "v1",
"id": "CVE-2024-49913-4de6a251"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c",
"function": "commit_planes_for_stream"
},
"digest": {
"length": 10660.0,
"function_hash": "248165541729937966963169592868450881277"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d71a72539e173a9b00ca0b1852cbaa5f5bf1ad",
"signature_version": "v1",
"id": "CVE-2024-49913-77567fde"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c",
"function": "commit_planes_for_stream"
},
"digest": {
"length": 7125.0,
"function_hash": "272513761105783588451881073051794983967"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ebfa6663807c144be8c8b6727375012409d2356",
"signature_version": "v1",
"id": "CVE-2024-49913-95b532c2"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c"
},
"digest": {
"line_hashes": [
"197282418047060926150547054311221227846",
"55475931431879177025656987968037770137",
"280360173721593342957417258541725977616",
"294321438166046732093028274234024301438"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3929e382e4758aff42da0102a60d13337c99d3b8",
"signature_version": "v1",
"id": "CVE-2024-49913-9c5cc931"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c",
"function": "commit_planes_for_stream"
},
"digest": {
"length": 10623.0,
"function_hash": "96053734040392416133342795912933255595"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73efd2a611b62fee71a7b7f27d9d08bb60da8a72",
"signature_version": "v1",
"id": "CVE-2024-49913-c930d240"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c"
},
"digest": {
"line_hashes": [
"197282418047060926150547054311221227846",
"55475931431879177025656987968037770137",
"280360173721593342957417258541725977616",
"294321438166046732093028274234024301438"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73efd2a611b62fee71a7b7f27d9d08bb60da8a72",
"signature_version": "v1",
"id": "CVE-2024-49913-de109123"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/display/dc/core/dc.c"
},
"digest": {
"line_hashes": [
"197282418047060926150547054311221227846",
"55475931431879177025656987968037770137",
"280360173721593342957417258541725977616",
"294321438166046732093028274234024301438"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40193ff73630adf76bc0d82398f7d90fb576dba4",
"signature_version": "v1",
"id": "CVE-2024-49913-ef3886d6"
}
]