First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-41089

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes

In nv17_tv_get_hd_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). The same applies to drm_cvt_mode(). Add a check to avoid null pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Jul 29, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-410907.1In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed CVE-2024-410917.1In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed CVE-2024-410927.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has bee CVE-2024-410935.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using st CVE-2024-410945.5In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smem_start is enable per module option Only ex CVE-2024-410955.5In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_mo CVE-2024-410967.8In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE reports the following U CVE-2024-410975.5In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacru_bind() Syzbot is sti CVE-2024-410985.5In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error If the ata_por CVE-2024-411078.1The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authenticat CVE-2024-411085.9FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improper access control si CVE-2024-411096.5Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to `/admin/index/statistics` with a logged in Pimco