Bug 2307879 (CVE-2024-43906)

Summary: CVE-2024-43906 kernel: drm/admgpu: fix dereferencing null pointer context
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: dfreiber, drow, jburrell, vkumar
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
In Linux kernel drm/admgpu, when user space sets an invalid ta type, the pointer context will be empty, eventually leading to dereferencing a null pointer.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2308118    
Bug Blocks:    

Description OSIDB Bzimport 2024-08-26 11:21:28 UTC 
In the Linux kernel, the following vulnerability has been resolved:

drm/admgpu: fix dereferencing null pointer context

When user space sets an invalid ta type, the pointer context will be empty.
So it need to check the pointer context before using it
Comment 1 Mauro Matteo Cascella 2024-08-27 11:17:42 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024082624-CVE-2024-43906-27ab@gregkh/T