SecuriTricks - CVE-2024-56777

Description

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure.

Product(s) Impacted

Vendor	Product	Versions
Linux	Linux Kernel	*

Weaknesses

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

*CPE(s)

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/

References

https://git.kernel.org/stable/c/3cf2e7c448e246f7e700c7aa47450d1e27579559

https://git.kernel.org/stable/c/997b64c3f4c1827c5cfda8ae7f5d13f78d28b541

https://git.kernel.org/stable/c/b79612ed6bc1a184c45427105c851b5b2d4342ca

https://git.kernel.org/stable/c/e965e771b069421c233d674c3c8cd8c7f7245f42

https://git.kernel.org/stable/c/f5804567cf9605d6e5ec46c0bb786f7d50f18c13

CVSS Score

5.5 / 10

CVSS Data

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: LOW
Scope: UNCHANGED
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: HIGH

View Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Date

Published: Jan. 8, 2025, 6:15 p.m.
Last Modified: Jan. 9, 2025, 9:43 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVE-2024-56777