In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: avoid nullptrderef in vmwframebuffersurfacecreatehandle
The 'vmwuserobjectbuffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the vmwframebuffersurfacecreate_handle.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53115.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53115.json"
[
{
"id": "CVE-2024-53115-2871d5b0",
"target": {
"file": "drivers/gpu/drm/vmwgfx/vmwgfx_kms.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36f64da080555175b58d85f99f5f90435e274e56",
"digest": {
"threshold": 0.9,
"line_hashes": [
"129263679212305490226693878594585072556",
"96528556447660166420156330882321432597",
"158264116941495486801765787555656252687"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2024-53115-967f6e2d",
"target": {
"function": "vmw_framebuffer_surface_create_handle",
"file": "drivers/gpu/drm/vmwgfx/vmwgfx_kms.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36f64da080555175b58d85f99f5f90435e274e56",
"digest": {
"function_hash": "298487206892663207716579979437758310877",
"length": 218.0
},
"signature_type": "Function"
}
]