CVE-2024-49901

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs

There are some cases, such as the one uncovered by Commit 46d4efcccc68 ("drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails") where

msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL);

is called on gpu->pdev == NULL, as the GPU device has not been fully initialized yet.

Turns out that there's more than just the aforementioned path that causes this to happen (e.g. the case when there's speedbin data in the catalog, but opp-supported-hw is missing in DT).

Assigning msm_gpu->pdev earlier seems like the least painful solution to this, therefore do so.

Patchwork: https://patchwork.freedesktop.org/patch/602742/

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300, < 9288a9676c529ad9c856096db68fad812499bc4a; >= 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300, < 9773737375b20070ea935203fd66cb9fa17c5acb; >= 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300, < e8ac2060597a5768e4699bb61d604b4c09927b85; >= 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300, < 16007768551d5bfe53426645401435ca8d2ef54f
LinuxLinux3.12

References

Timeline

Published
Oct 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-499025.5In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot repCVE-2024-499037.0In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] =========================CVE-2024-499045.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list CVE-2024-499055.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_curCVE-2024-499065.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointer before try to access it [why & howCVE-2024-499075.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc->clk_mgr [WHY & HCVE-2024-499085.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (vCVE-2024-499095.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn32_set_outpuCVE-2024-49919.8Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama_lengkap. This vulnerability cCVE-2024-499105.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn401_set_outpCVE-2024-499115.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn20_set_outpuCVE-2024-499125.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_exi
CVE-2024-49901: Medium severity, CVSS 5.5 | Vulnix