Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2024-50156— drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()

EPSS 0.01% · P2
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-50156

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() If the allocation in msm_disp_state_dump_regs() failed then `block->state` can be NULL. The msm_disp_state_print_regs() function _does_ have code to try to handle it with: if (*reg) dump_addr = *reg; ...but since "dump_addr" is initialized to NULL the above is actually a noop. The code then goes on to dereference `dump_addr`. Make the function print "Registers not stored" when it sees a NULL to solve this. Since we're touching the code, fix msm_disp_state_print_regs() not to pointlessly take a double-pointer and properly mark the pointer as `const`. Patchwork: https://patchwork.freedesktop.org/patch/619657/
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于在msm_disp_state_print_regs函数中存在空指针取消引用问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 98659487b845c05b6bed85d881713545db674c7c ~ 42cf045086feae77b212f0f66e742b91a5b566b7 -
LinuxLinux 5.14 -

II. Public POCs for CVE-2024-50156

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-50156

登录查看更多情报信息。

Same Patch Batch · Linux · 2024-11-07 · 34 CVEs total

CVE-2024-50165bpf: Preserve param->string when parsing mount options
CVE-2024-50157RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
CVE-2024-50158RDMA/bnxt_re: Fix out of bound check
CVE-2024-50159firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
CVE-2024-50160ALSA: hda/cs8409: Fix possible NULL dereference
CVE-2024-50161bpf: Check the remaining info_cnt before repeating btf fields
CVE-2024-50162bpf: devmap: provide rxq after redirect
CVE-2024-50163bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
CVE-2024-50164bpf: Fix overloading of MEM_UNINIT's meaning
CVE-2024-50155netdevsim: use cond_resched() in nsim_dev_trap_report_work()
CVE-2024-50166fsl/fman: Fix refcount handling of fman-related devices
CVE-2024-50167be2net: fix potential memory leak in be_xmit()
CVE-2024-50168net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
CVE-2024-50169vsock: Update rx_bytes on read_skb()
CVE-2024-50170net: bcmasp: fix potential memory leak in bcmasp_xmit()
CVE-2024-50171net: systemport: fix potential memory leak in bcm_sysport_xmit()
CVE-2024-50172RDMA/bnxt_re: Fix a possible memory leak
CVE-2024-50139KVM: arm64: Fix shift-out-of-bounds bug
CVE-2024-50154tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
CVE-2024-50153scsi: target: core: Fix null-ptr-deref in target_alloc_device()

Showing top 20 of 34 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2024-50156

No comments yet


Leave a comment