Bug 2350352 (CVE-2024-58052) - CVE-2024-58052 kernel: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
Summary: CVE-2024-58052 kernel: drm/amdgpu: Fix potential NULL pointer dereference in ...
Keywords:
Status: NEW
Alias: CVE-2024-58052
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-03-06 16:01 UTC by OSIDB Bzimport
Modified: 2025-04-02 13:26 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-03-06 16:01:22 UTC
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table

The function atomctrl_get_smc_sclk_range_table() does not check the return
value of smu_atom_get_data_table(). If smu_atom_get_data_table() fails to
retrieve SMU_Info table, it returns NULL which is later dereferenced.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

In practice this should never happen as this code only gets called
on polaris chips and the vbios data table will always be present on
those chips.

Comment 1 Mauro Matteo Cascella 2025-03-06 16:18:26 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025030605-CVE-2024-58052-c947@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.