CVE-2024-41089

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes

Description

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes In nv17_tv_get_hd_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). The same applies to drm_cvt_mode(). Add a check to avoid null pointer dereference.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.04%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/ffabad4aa91e33ced3c6ae793fb37771b3e9cb51 patch
https://git.kernel.org/stable/c/1c9f2e60150b4f13789064370e37f39e6e060f50 patch
https://git.kernel.org/stable/c/56fc4d3b0bdef691831cd95715a7ca3ebea98b2d patch
https://git.kernel.org/stable/c/5eecb49a6c268dc229005bf6e8167d4001dc09a0 patch
https://git.kernel.org/stable/c/30cbf6ffafbbdd8a6e4e5f0a2e9a9827ee83f3ad patch
https://git.kernel.org/stable/c/7ece609b0ce7a7ea8acdf512a77d1fee26621637 patch
https://git.kernel.org/stable/c/6e49a157d541e7e97b815a56f4bdfcbc89844a59 patch
https://git.kernel.org/stable/c/6d411c8ccc0137a612e0044489030a194ff5c843 patch

Frequently Asked Questions

What is the severity of CVE-2024-41089?
CVE-2024-41089 has been scored as a medium severity vulnerability.
How to fix CVE-2024-41089?
To fix CVE-2024-41089, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-41089 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-41089 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-41089?
CVE-2024-41089 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.