CVE-2024-49914: Linux kernel · drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 30 Oct 2026, 15:17 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 21 Oct 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
A fix has been applied in the Linux kernel source code to add a null check for pipe_ctx->plane_state in the dcn20_program_pipe function. Users should update to the latest kernel version containing this fix to mitigate the issue.
Description
A null pointer dereference vulnerability was identified and fixed in the Linux kernel's AMD display driver, specifically in the dcn20_program_pipe function. The issue occurred when the pipe_ctx->plane_state pointer was null, leading to potential kernel crashes. The fix adds a null check to prevent dereferencing a null pointer.
References
- git.kernel.org/stable/c/21c613e1c6ae45bb29ebc156d22060f034cc5665 (opens in a new tab)
- git.kernel.org/stable/c/68f75e6f08aad66069a629db8d7840919156c761 (opens in a new tab)
- git.kernel.org/stable/c/65a6fee22d5cfa645cb05489892dc9cd3d142fc2 (opens in a new tab)
- git.kernel.org/stable/c/8e4ed3cf1642df0c4456443d865cff61a9598aa8 (opens in a new tab)