Bug 2327335 (CVE-2024-53060) - CVE-2024-53060 kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
Summary: CVE-2024-53060 kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF i...
Keywords:
Status: NEW
Alias: CVE-2024-53060
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2327487
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-19 18:01 UTC by OSIDB Bzimport
Modified: 2025-05-13 08:35 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2025:6966 0 None None None 2025-05-13 08:35:32 UTC

Description OSIDB Bzimport 2024-11-19 18:01:33 UTC
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

acpi_evaluate_object() may return AE_NOT_FOUND (failure), which
would result in dereferencing buffer.pointer (obj) while being NULL.

Although this case may be unrealistic for the current code, it is
still better to protect against possible bugs.

Bail out also when status is AE_NOT_FOUND.

This fixes 1 FORWARD_NULL issue reported by Coverity
Report: CID 1600951:  Null pointer dereferences  (FORWARD_NULL)

(cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1)

Comment 2 errata-xmlrpc 2025-05-13 08:35:31 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:6966 https://access.redhat.com/errata/RHSA-2025:6966


Note You need to log in before you can comment on or make changes to this bug.