CVE-2024-49912 – drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
https://notcve.org/view.php?id=CVE-2024-49912
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' This commit adds a null check for 'stream_status' in the function 'planes_changed_for_existing_stream'. Previously, the code assumed 'stream_status' could be null, but did not handle the case where it was actually null. This could lead to a null pointer dereference. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/core/dc_resource.c:3784 plan... • https://git.kernel.org/stable/c/c4b699b93496c423b0e5b584d4eb4ab849313bcf •
CVE-2024-49911 – drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
https://notcve.org/view.php?id=CVE-2024-49911
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func This commit adds a null check for the set_output_gamma function pointer in the dcn20_set_output_transfer_func function. Previously, set_output_gamma was being checked for null at line 1030, but then it was being dereferenced without any null check at line 1048. This could potentially lead to a null pointer dereference error if set_output_gamma is null. ... • https://git.kernel.org/stable/c/e8a24767899c86f4c5f1e4d3b2608942d054900f •
CVE-2024-49910 – drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func
https://notcve.org/view.php?id=CVE-2024-49910
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func This commit adds a null check for the set_output_gamma function pointer in the dcn401_set_output_transfer_func function. Previously, set_output_gamma was being checked for null, but then it was being dereferenced without any null check. This could lead to a null pointer dereference if set_output_gamma is null. To fix this, we now ensure that set_outpu... • https://git.kernel.org/stable/c/d8ee900b92b6526cf84275b49a473155ad75c70e •
CVE-2024-49909 – drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
https://notcve.org/view.php?id=CVE-2024-49909
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func This commit adds a null check for the set_output_gamma function pointer in the dcn32_set_output_transfer_func function. Previously, set_output_gamma was being checked for null, but then it was being dereferenced without any null check. This could lead to a null pointer dereference if set_output_gamma is null. To fix this, we now ensure that set_output_... • https://git.kernel.org/stable/c/e087c9738ee1cdeebde346f4dfc819e5f7057e90 •
CVE-2024-49908 – drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
https://notcve.org/view.php?id=CVE-2024-49908
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2) This commit adds a null check for the 'afb' variable in the amdgpu_dm_update_cursor function. Previously, 'afb' was assumed to be null at line 8388, but was used later in the code without a null check. This could potentially lead to a null pointer dereference. Changes since v1: - Moved the null check for 'afb' to the line where 'afb' is used. (Alex) Fixes the belo... • https://git.kernel.org/stable/c/a742168b6a39ead257da53bcbe472384d6e14a1b •
CVE-2024-49907 – drm/amd/display: Check null pointers before using dc->clk_mgr
https://notcve.org/view.php?id=CVE-2024-49907
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc->clk_mgr [WHY & HOW] dc->clk_mgr is null checked previously in the same function, indicating it might be null. Passing "dc" to "dc->hwss.apply_idle_power_optimizations", which dereferences null "dc->clk_mgr". (The function pointer resolves to "dcn35_apply_idle_power_optimizations".) This fixes 1 FORWARD_NULL issue reported by Coverity. Ubuntu Security Notice 7170-1 - Several security ... • https://git.kernel.org/stable/c/8d54001f8dccd56146973f23f3ab2ba037a21251 •
CVE-2024-49906 – drm/amd/display: Check null pointer before try to access it
https://notcve.org/view.php?id=CVE-2024-49906
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointer before try to access it [why & how] Change the order of the pipe_ctx->plane_state check to ensure that plane_state is not null before accessing it. Ubuntu Security Notice 7170-1 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. • https://git.kernel.org/stable/c/ebef6616219ff04abdeb39450625f85419787ee3 •
CVE-2024-49905 – drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
https://notcve.org/view.php?id=CVE-2024-49905
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) This commit adds a null check for the 'afb' variable in the amdgpu_dm_plane_handle_cursor_update function. Previously, 'afb' was assumed to be null, but was used later in the code without a null check. This could potentially lead to a null pointer dereference. Changes since v1: - Moved the null check for 'afb' to the line where 'afb' is used. (Alex) F... • https://git.kernel.org/stable/c/bd0e24e5e608ccb9fdda300bb974496d6d8cf57d •
CVE-2024-49904 – drm/amdgpu: add list empty check to avoid null pointer issue
https://notcve.org/view.php?id=CVE-2024-49904
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list empty check to avoid null pointer issues in some corner cases. - list_for_each_entry_safe() • https://git.kernel.org/stable/c/5ec731ef47f1dba34daad3e51a93de793f9319ac •
CVE-2024-49903 – jfs: Fix uaf in dbFreeBits
https://notcve.org/view.php?id=CVE-2024-49903
21 Oct 2024 — In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ================================================================== BUG: KASAN: slab-use-after-free in __mutex_lock_common kernel/locking/mutex.c:587 [inline] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfe/0xd70 kernel/locking/mutex.c:752 Read of size 8 at addr ffff8880229254b0 by task syz-executor357/5216 CPU: 0 UID: 0 PID: 5216 Comm: syz-executor357 Not tainted 6.11.0-rc3-syzkaller-0015... • https://git.kernel.org/stable/c/4ac58f7734937f3249da734ede946dfb3b1af5e4 •