CVE-2024-36014

drm/arm/malidp: fix a possible null pointer dereference

Description

In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new memory is allocated with kzalloc, but no check is performed. In order to prevent null pointer dereferencing, ensure that mw_state is checked before calling __drm_atomic_helper_connector_reset.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.06%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/b6cc5dd06336ed8bb3a7a1fc5aaf7d5e88bc0818 patch
https://git.kernel.org/stable/c/565d9ad7e5a18eb69ed8b66a9e9bb3f45346520c patch
https://git.kernel.org/stable/c/a5fa5b40a278a3ca978fed64707bd27614adb1eb patch
https://git.kernel.org/stable/c/3e54d4e95120641216dfe91a6c49f116a9f68490 patch
https://git.kernel.org/stable/c/e4b52d49383306ef73fd1bd9102538beebb0fe07 patch
https://git.kernel.org/stable/c/335cc45ef2b81b68be63c698b4f867a530bdf7a5 patch
https://git.kernel.org/stable/c/b77620730f614059db2470e8ebab3e725280fc6d patch
https://git.kernel.org/stable/c/93f76ec1eddce60dbb5885cbc0d7df54adee4639 patch
https://git.kernel.org/stable/c/a1f95aede6285dba6dd036d907196f35ae3a11ea patch

Frequently Asked Questions

What is the severity of CVE-2024-36014?
CVE-2024-36014 has been scored as a medium severity vulnerability.
How to fix CVE-2024-36014?
To fix CVE-2024-36014, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-36014 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-36014 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-36014?
CVE-2024-36014 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.