CVE - CVE-2024-50156

CVE-ID
CVE-2024-50156	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() If the allocation in msm_disp_state_dump_regs() failed then `block->state` can be NULL. The msm_disp_state_print_regs() function _does_ have code to try to handle it with: if (reg) dump_addr = reg; ...but since "dump_addr" is initialized to NULL the above is actually a noop. The code then goes on to dereference `dump_addr`. Make the function print "Registers not stored" when it sees a NULL to solve this. Since we're touching the code, fix msm_disp_state_print_regs() not to pointlessly take a double-pointer and properly mark the pointer as `const`. Patchwork: https://patchwork.freedesktop.org/patch/619657/
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/293f53263266bc4340d777268ab4328a97f041fa URL:https://git.kernel.org/stable/c/293f53263266bc4340d777268ab4328a97f041fa MISC:https://git.kernel.org/stable/c/42cf045086feae77b212f0f66e742b91a5b566b7 URL:https://git.kernel.org/stable/c/42cf045086feae77b212f0f66e742b91a5b566b7 MISC:https://git.kernel.org/stable/c/563aa81fd66a4e7e6e551a0e02bcc23957cafe2f URL:https://git.kernel.org/stable/c/563aa81fd66a4e7e6e551a0e02bcc23957cafe2f MISC:https://git.kernel.org/stable/c/e8e9f2a12a6214080c8ea83220a596f6e1dedc6c URL:https://git.kernel.org/stable/c/e8e9f2a12a6214080c8ea83220a596f6e1dedc6c MISC:https://git.kernel.org/stable/c/f7ad916273483748582d97cfa31054ccb19224f3 URL:https://git.kernel.org/stable/c/f7ad916273483748582d97cfa31054ccb19224f3
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)