SecuriTricks - CVE-2024-56778

Description

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure.

Product(s) Impacted

Vendor	Product	Versions
Linux	Linux Kernel	*

Weaknesses

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

*CPE(s)

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/
o	linux	linux_kernel	/	/	/	/	/	/	/	/

References

https://git.kernel.org/stable/c/31c857e7496d34e5a32a6f75bc024d0b06fd646a

https://git.kernel.org/stable/c/6b0d0d6e9d3c26697230bf7dc9e6b52bdb24086f

https://git.kernel.org/stable/c/82a5312f874fb18f045d9658e9bd290e3b0621c0

https://git.kernel.org/stable/c/837eb99ad3340c7a9febf454f41c8e3edb68ac1e

https://git.kernel.org/stable/c/c1ab40a1fdfee732c7e6ff2fb8253760293e47e8

CVSS Score

5.5 / 10

CVSS Data

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: LOW
Scope: UNCHANGED
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: HIGH

View Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Date

Published: Jan. 8, 2025, 6:15 p.m.
Last Modified: Jan. 9, 2025, 9:50 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVE-2024-56778