Search: CVE-2024-49914

A null pointer dereference vulnerability was identified and fixed in the Linux kernel's AMD GPU driver, specifically in the dcn20_program_pipe function. The issue occurred when the pipe_ctx->plane_state pointer was null and accessed without validation, potentially causing a system crash. This flaw has been addressed by adding a null check before accessing pipe_ctx->plane_state. The vulnerability affects multiple Linux kernel versions, including various Azure and Ubuntu OEM kernel builds prior to 6.8.0-1027.29 and specific 4.11 and 4.13 kernel versions. The fix is included in Linux kernel versions 6.8.0-1027.29 and later. The CVSS score is 5.5, indicating a medium severity impact primarily causing denial of service via system crash. No known exploits in the wild have been reported. Users are advised to update to the fixed kernel versions and reboot their systems to apply the patch.