In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix potential NULL pointer dereference in atomctrlgetsmcsclkrange_table
The function atomctrlgetsmcsclkrangetable() does not check the return value of smuatomgetdatatable(). If smuatomgetdatatable() fails to retrieve SMUInfo table, it returns NULL which is later dereferenced.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
In practice this should never happen as this code only gets called on polaris chips and the vbios data table will always be present on those chips.
[
{
"target": {
"function": "atomctrl_get_smc_sclk_range_table",
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"length": 783.0,
"function_hash": "71927092405282709590313440543895960308"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b97cd8a61b2b40fd73cf92a4bb2256462d22adb",
"deprecated": false,
"id": "CVE-2024-58052-0c8ce28b",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"216240951598936918994251496468333210681",
"2123693431568141698049975993585195281",
"130050505838143805015548951632870903757"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae522ad211ec4b72eaf742b25f24b0a406afcba1",
"deprecated": false,
"id": "CVE-2024-58052-2feaea36",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"216240951598936918994251496468333210681",
"2123693431568141698049975993585195281",
"130050505838143805015548951632870903757"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b97cd8a61b2b40fd73cf92a4bb2256462d22adb",
"deprecated": false,
"id": "CVE-2024-58052-37759c54",
"signature_type": "Line"
},
{
"target": {
"function": "atomctrl_get_smc_sclk_range_table",
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"length": 783.0,
"function_hash": "71927092405282709590313440543895960308"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@396350adf0e5ad4bf05f01e4d79bfb82f0f6c41a",
"deprecated": false,
"id": "CVE-2024-58052-5130540d",
"signature_type": "Function"
},
{
"target": {
"function": "atomctrl_get_smc_sclk_range_table",
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"length": 783.0,
"function_hash": "71927092405282709590313440543895960308"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2396bc91935c6da0588ce07850d07897974bd350",
"deprecated": false,
"id": "CVE-2024-58052-713b1bb9",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"216240951598936918994251496468333210681",
"2123693431568141698049975993585195281",
"130050505838143805015548951632870903757"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@396350adf0e5ad4bf05f01e4d79bfb82f0f6c41a",
"deprecated": false,
"id": "CVE-2024-58052-8514d0fc",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"216240951598936918994251496468333210681",
"2123693431568141698049975993585195281",
"130050505838143805015548951632870903757"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2396bc91935c6da0588ce07850d07897974bd350",
"deprecated": false,
"id": "CVE-2024-58052-8b738b11",
"signature_type": "Line"
},
{
"target": {
"function": "atomctrl_get_smc_sclk_range_table",
"file": "drivers/gpu/drm/amd/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"length": 783.0,
"function_hash": "71927092405282709590313440543895960308"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a713ba7167c2d74c477dd7764dbbdbe3199f17f4",
"deprecated": false,
"id": "CVE-2024-58052-b658a09d",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/gpu/drm/amd/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"216240951598936918994251496468333210681",
"2123693431568141698049975993585195281",
"130050505838143805015548951632870903757"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a713ba7167c2d74c477dd7764dbbdbe3199f17f4",
"deprecated": false,
"id": "CVE-2024-58052-c6848de1",
"signature_type": "Line"
},
{
"target": {
"function": "atomctrl_get_smc_sclk_range_table",
"file": "drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c"
},
"signature_version": "v1",
"digest": {
"length": 783.0,
"function_hash": "71927092405282709590313440543895960308"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae522ad211ec4b72eaf742b25f24b0a406afcba1",
"deprecated": false,
"id": "CVE-2024-58052-fe326930",
"signature_type": "Function"
}
]