CVE-2024-26949

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm: Fix NULL pointer dereference when get power limit

Because powerplay_table initialization is skipped under sriov case, We check and set default lower and upper OD value if powerplay_table is NULL.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= c83d9cce713f148750d686174743ca2364b7a06e, < 99c2f1563b1400cc8331fc79d19ada1bb95bb388; >= 7968e9748fbbd7ae49770d9f8a8231d8bce2aebb, < b8eaa8ef1f1157a9f330e36e66bdd7a693309948; >= 7968e9748fbbd7ae49770d9f8a8231d8bce2aebb, < 08ae9ef829b8055c2fdc8cfee37510c1f4721a07; >= 6.7.9, < 6.7.12
LinuxLinux6.8

References

Timeline

Published
May 1, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-26955.4The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions uCVE-2024-269507.8In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The prevCVE-2024-269517.8In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via is_dead instead of emptCVE-2024-269527.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I fouCVE-2024-269535.5In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reoCVE-2024-269547.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffCVE-2024-269557.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent kernel bug at submit_bh_wbc() Fix a bug where nilfs_geCVE-2024-269567.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappinCVE-2024-269577.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with CVE-2024-269587.8In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the fCVE-2024-269595.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix btnxpuart_close Fix scheduling while atomic CVE-2024-26964.8The socialdriver-framework WordPress plugin before 2024.04.30 does not sanitise and escape some of its settings, which could allow high priv
CVE-2024-26949: Medium severity, CVSS 5.5 | Vulnix