CVE-2024-49914

This commit addresses a null pointer dereference issue in the dcn20_program_pipe function. The issue could occur when pipe_ctx->plane_state is null.

The fix adds a check to ensure pipe_ctx->plane_state is not null before accessing. This prevents a null pointer dereference.

Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn20/dcn20hwseq.c:1925 dcn20programpipe() error: we previously assumed 'pipectx->plane_state' could be null (see line 1877)

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c

Fixed

68f75e6f08aad66069a629db8d7840919156c761

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c

Fixed

65a6fee22d5cfa645cb05489892dc9cd3d142fc2

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c

Fixed

8e4ed3cf1642df0c4456443d865cff61a9598aa8

Affected versions

v4.*

v4.13

v4.13-rc6

v4.13-rc7

v4.14

v4.14-rc1

v4.14-rc2

v4.14-rc3

v4.14-rc4

v4.14-rc5

v4.14-rc6

v4.14-rc7

v4.14-rc8

v4.15

v4.15-rc1

v4.15-rc2

v4.15-rc3

v4.15-rc4

v4.15-rc5

v4.15-rc6

v4.15-rc7

v4.15-rc8

v4.15-rc9

v4.16

v4.16-rc1

v4.16-rc2

v4.16-rc3

v4.16-rc4

v4.16-rc5

v4.16-rc6

v4.16-rc7

v4.17

v4.17-rc1

v4.17-rc2

v4.17-rc3

v4.17-rc4

v4.17-rc5

v4.17-rc6

v4.17-rc7

v4.18

v4.18-rc1

v4.18-rc2

v4.18-rc3

v4.18-rc4

v4.18-rc5

v4.18-rc6

v4.18-rc7

v4.18-rc8

v4.19

v4.19-rc1

v4.19-rc2

v4.19-rc3

v4.19-rc4

v4.19-rc5

v4.19-rc6

v4.19-rc7

v4.19-rc8

v4.20

v4.20-rc1

v4.20-rc2

v4.20-rc3

v4.20-rc4

v4.20-rc5

v4.20-rc6

v4.20-rc7

v5.*

v5.0

v5.0-rc1

v5.0-rc2

v5.0-rc3

v5.0-rc4

v5.0-rc5

v5.0-rc6

v5.0-rc7

v5.0-rc8

v5.1

v5.1-rc1

v5.1-rc2

v5.1-rc3

v5.1-rc4

v5.1-rc5

v5.1-rc6

v5.1-rc7

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.2

v5.2-rc1

v5.2-rc2

v5.2-rc3

v5.2-rc4

v5.2-rc5

v5.2-rc6

v5.2-rc7

v5.3

v5.3-rc1

v5.3-rc2

v5.3-rc3

v5.3-rc4

v5.3-rc5

v5.3-rc6

v5.3-rc7

v5.3-rc8

v5.4

v5.4-rc1

v5.4-rc2

v5.4-rc3

v5.4-rc4

v5.4-rc5

v5.4-rc6

v5.4-rc7

v5.4-rc8

v5.5

v5.5-rc1

v5.5-rc2

v5.5-rc3

v5.5-rc4

v5.5-rc5

v5.5-rc6

v5.5-rc7

v5.6

v5.6-rc1

v5.6-rc2

v5.6-rc3

v5.6-rc4

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.11.1

v6.11.2

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c",
            "function": "dcn20_program_pipe"
        },
        "digest": {
            "length": 4588.0,
            "function_hash": "163568006818879220249674897329428651507"
        },
        "id": "CVE-2024-49914-020e443c",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e4ed3cf1642df0c4456443d865cff61a9598aa8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "180166028383424644984861496558541111802",
                "226149435981968214087853254063753258972",
                "182629882665144979971128077560292253961",
                "146190960100417741690303200860707058856",
                "328940576432533817570366175438789644863",
                "241346847253050184793655437663355758127",
                "229790823784943582972192205742636695121",
                "276516092832025429036193227893047421853",
                "266042297971743680264490245767115497375",
                "13278113116247974083065515246817825829",
                "279789168380571338600504740558358747055",
                "256084401319490014540447584146728848535",
                "46817018742752804075941797561789426354",
                "83728279854736959472518018480339587666",
                "236333454834835223124370766178310751667",
                "159302005575023305071849826488453376812",
                "158590015065149972601521107337432312961",
                "141878646956916386721454958351385501803",
                "159785918829056684582700228297328010344",
                "125708123889034201377575291155629432923",
                "150788241173146667612095136841068471882",
                "103361399853781903814529802275933805897",
                "199563204064973262287716616238031218632",
                "143277043828755911388645553392305374925",
                "171000252069245373674288272555434221408"
            ]
        },
        "id": "CVE-2024-49914-4379e96f",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e4ed3cf1642df0c4456443d865cff61a9598aa8",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c",
            "function": "dcn20_program_pipe"
        },
        "digest": {
            "length": 3355.0,
            "function_hash": "185285428956178481683444252061470134952"
        },
        "id": "CVE-2024-49914-63e50fe2",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68f75e6f08aad66069a629db8d7840919156c761",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "170382165995074639019779183225239484440",
                "105198994672409400433099150930469983737",
                "115514883442987208395773747503575988039",
                "146190960100417741690303200860707058856",
                "328940576432533817570366175438789644863",
                "261104440524448826210063254396933253317",
                "46597788165571899962584689797581001258",
                "276055607989026623186919397366499543052",
                "83728279854736959472518018480339587666",
                "236333454834835223124370766178310751667",
                "159302005575023305071849826488453376812",
                "158590015065149972601521107337432312961",
                "141878646956916386721454958351385501803",
                "159785918829056684582700228297328010344",
                "125708123889034201377575291155629432923",
                "150788241173146667612095136841068471882",
                "103361399853781903814529802275933805897",
                "199563204064973262287716616238031218632",
                "143277043828755911388645553392305374925",
                "171000252069245373674288272555434221408"
            ]
        },
        "id": "CVE-2024-49914-6b7e5db3",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68f75e6f08aad66069a629db8d7840919156c761",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "180166028383424644984861496558541111802",
                "226149435981968214087853254063753258972",
                "182629882665144979971128077560292253961",
                "146190960100417741690303200860707058856",
                "328940576432533817570366175438789644863",
                "241346847253050184793655437663355758127",
                "229790823784943582972192205742636695121",
                "276516092832025429036193227893047421853",
                "266042297971743680264490245767115497375",
                "13278113116247974083065515246817825829",
                "279789168380571338600504740558358747055",
                "256084401319490014540447584146728848535",
                "46817018742752804075941797561789426354",
                "83728279854736959472518018480339587666",
                "236333454834835223124370766178310751667",
                "159302005575023305071849826488453376812",
                "158590015065149972601521107337432312961",
                "141878646956916386721454958351385501803",
                "159785918829056684582700228297328010344",
                "125708123889034201377575291155629432923",
                "150788241173146667612095136841068471882",
                "103361399853781903814529802275933805897",
                "199563204064973262287716616238031218632",
                "143277043828755911388645553392305374925",
                "171000252069245373674288272555434221408"
            ]
        },
        "id": "CVE-2024-49914-9ac9e487",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65a6fee22d5cfa645cb05489892dc9cd3d142fc2",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c",
            "function": "dcn20_program_pipe"
        },
        "digest": {
            "length": 4545.0,
            "function_hash": "133288883503347471926714638417468125162"
        },
        "id": "CVE-2024-49914-c78a4b75",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65a6fee22d5cfa645cb05489892dc9cd3d142fc2",
        "signature_version": "v1"
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.15.0

Fixed

6.6.64

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.11.3