CVE-2024-38622

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: Add callback function pointer check before its call

In dpu_core_irq_callback_handler() callback function pointer is compared to NULL, but then callback function is unconditionally called by this pointer. Fix this bug by adding conditional return.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Patchwork: https://patchwork.freedesktop.org/patch/588237/

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= c929ac60b3ed34accd25a052a4833e418900f466, < cefb0a99eddf7dd131121a7b348ffbbe32254ec4; >= c929ac60b3ed34accd25a052a4833e418900f466, < 873f67699114452c2a996c4e10faac8ff860c241; >= c929ac60b3ed34accd25a052a4833e418900f466, < 9078630ed7f8f25d65d11823e7f2b11a8e2f4f0f; >= c929ac60b3ed34accd25a052a4833e418900f466, < 530f272053a5e72243a9cb07bb1296af6c346002
LinuxLinux5.19

References

Timeline

Published
Jun 21, 2024
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-386237.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixed size Should fix sCVE-2024-386245.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, inCVE-2024-386255.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is calCVE-2024-386265.5In the Linux kernel, the following vulnerability has been resolved: fuse: clear FR_SENT when re-adding requests into pending list The follCVE-2024-386277.8In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stm_register_device() The put_device(&CVE-2024-386287.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of controls after free durCVE-2024-386297.8In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Avoid unnecessary destruction of file_ida file_ida isCVE-2024-38639.8The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. OCVE-2024-386307.8In the Linux kernel, the following vulnerability has been resolved: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger CVE-2024-386317.8In the Linux kernel, the following vulnerability has been resolved: iio: adc: PAC1934: fix accessing out of bounds array index Fix accessiCVE-2024-386325.5In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfio_intx_enable() If vfio_irq_CVE-2024-386335.5In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uart_driver_registered on driver removal The r
CVE-2024-38622: Medium severity, CVSS 5.5 | Vulnix