CVE-2024-53060

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in dereferencing buffer.pointer (obj) while being NULL.

Although this case may be unrealistic for the current code, it is still better to protect against possible bugs.

Bail out also when status is AE_NOT_FOUND.

This fixes 1 FORWARD_NULL issue reported by Coverity Report: CID 1600951: Null pointer dereferences (FORWARD_NULL)

(cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 58556dcbd5606a5daccaee73b2130bc16b48e025, < ce8a00a00e36f61f5a1e47734332420b68784c43; >= 43b4fa6e0e238c6e2662f4fb61d9f51c2785fb1d, < 8d7a28eca7553d35d4ce192fa1f390f2357df41b; >= 234682910971732cd4da96fd95946e296e486b38, < 2ac7f253deada4d449559b65a1c1cd0a6f6f19b7; >= 6032287747f874b52dc8b9d7490e2799736e035f, < 27fc29b5376998c126c85cf9b15d9dfc2afc9cbe; >= cd67af3c1762de4c2483ae4dbdd98f9ea8fa56e3, < 1a9f55ed5b512f510ccd21ad527d532e60550e80; >= 975ede2a7bec52b5da1428829b3439667c8a234b, < a613a392417532ca5aaf3deac6e3277aa7aaef2b; >= 1d7175f9c57b1abf9ecfbdfd53ea760761f52ffe, < b9d9881237afeb52eddd70077b7174bf17e2fa30; >= bf58f03931fdcf7b3c45cb76ac13244477a60f44, < a6dd15981c03f2cdc9a351a278f09b5479d53d2e
LinuxLinux>= 4.19.323, < 4.19.324; >= 5.4.285, < 5.4.286; >= 5.10.229, < 5.10.230; >= 5.15.170, < 5.15.172; >= 6.1.115, < 6.1.117; >= 6.6.59, < 6.6.61; >= 6.11.6, < 6.11.8

References

Timeline

Published
Nov 19, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-530617.8In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows worCVE-2024-530627.1In the Linux kernel, the following vulnerability has been resolved: media: mgb4: protect driver against spectre Frequency range is set froCVE-2024-530635.5In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev conCVE-2024-530645.5In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform CVE-2024-530655.5In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buCVE-2024-530665.5In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs() Fix the following KMCVE-2024-530675.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Start the RTC update work later The RTC update work iCVE-2024-530687.8In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() TheCVE-2024-530695.5In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: fix a NULL-pointer dereference Some SCM calls canCVE-2024-53073.3Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to dCVE-2024-530705.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suCVE-2024-530715.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Be stricter about IO mapping flags The current panthor_de
CVE-2024-53060: Medium severity, CVSS 5.5 | Vulnix