First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-26649

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix the null pointer when load rlc firmware

If the RLC firmware is invalid because of wrong header size, the pointer to the rlc firmware is released in function amdgpu_ucode_request. There will be a null pointer error in subsequent use. So skip validation to fix it.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= 3da9b71563cbb7281875adab1d7c4132679da987, < 8b5bacce2d13dbe648f0bfd3f738ecce8db4978c; >= 3da9b71563cbb7281875adab1d7c4132679da987, < d3887448486caeef9687fb5dfebd4ff91e0f25aa; >= 3da9b71563cbb7281875adab1d7c4132679da987, < bc03c02cc1991a066b23e69bbcc0f66e8f1f7453
Linux	Linux	6.3

References

Timeline

Published: Mar 26, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-26656.4The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button in all versions u CVE-2024-266515.5In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnet_get_endpoints Add check for usbnet_get_en CVE-2024-266524.1In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When au CVE-2024-266537.8In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling path When auxiliary CVE-2024-266547.0In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dream CVE-2024-266555.5In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function r CVE-2024-266565.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending CVE-2024-266575.5In the Linux kernel, the following vulnerability has been resolved: drm/sched: fix null-ptr-deref in init entity The bug can be triggered CVE-2024-266585.5In the Linux kernel, the following vulnerability has been resolved: bcachefs: grab s_umount only if snapshotting When I was testing mongod CVE-2024-266595.5In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 e CVE-2024-26665.4The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Bullet List Wi CVE-2024-266605.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in

CVE-2024-26649: Medium severity, CVSS 5.5 | Vulnix