CVE-2024-36897

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Atom Integrated System Info v2_2 for DCN35

New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx->dc_bios->integrated_info while it was NULL.

DAL parses through the BIOS and extracts the necessary integrated_info but was missing a case for the new BIOS version 2.3.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 3c7013a87124bab54216d9b99f77e8b6de6fbc1a; >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 02f5300f6827206f6e48a77f51e6264993695e5c; >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 7e3030774431eb093165a31baff040d35446fb8b; >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < c2797ec16d9072327e7578d09ee05bcab52fffd0; >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 9a35d205f466501dcfe5625ca313d944d0ac2d60
LinuxLinux4.15
linuxlinux_kernel>= 1da177e4c3f4, < 3c7013a87124
linuxlinux_kernel>= 1da177e4c3f4, < 02f5300f6827
linuxlinux_kernel>= 1da177e4c3f4, < 7e3030774431
linuxlinux_kernel>= 1da177e4c3f4, < c2797ec16d90
linuxlinux_kernel>= 1da177e4c3f4, < 9a35d205f466
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—

References

Timeline

Published
May 30, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-368987.8In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debCVE-2024-368997.0In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-aCVE-2024-36908.8A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of CVE-2024-369005.5In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during initialization CVE-2024-369015.5In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, thCVE-2024-369025.5In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()CVE-2024-369035.5In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was CVE-2024-369047.8In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson NascimCVE-2024-369055.5In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECVE-2024-369067.8In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash:CVE-2024-369085.5In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(CVE-2024-369095.5In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypt
CVE-2024-36897: Medium severity, CVSS 5.5 | Vulnix