Search: CVE-2024-49919

CVE-2024-49919 is a vulnerability in the Linux kernel's AMD GPU driver subsystem where a null pointer dereference could occur in the function dcn201_acquire_free_pipe_for_layer due to lack of a null check on the head_pipe variable. This flaw has been fixed by adding a null check to prevent dereferencing a null pointer, which could cause a denial of service (system crash). The vulnerability affects multiple specific Linux kernel versions, particularly in Ubuntu OEM kernels prior to 6.8.0 versions and certain 4.11 and 4.13 kernel builds. A patch is available and included in fixed kernel versions starting from 6.8.0-1023.23 and later. The CVSS score is 5.5 (medium severity) with an impact on availability only.