CVE-2024-26649
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firmware If the RLC firmware is invalid because of wrong header size, the pointer to the rlc firmware is released in function…
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firmware If the RLC firmware is invalid because of wrong header size, the pointer to the rlc firmware is released in function amdgpu_ucode_request. There will be a null pointer error in subsequent use. So skip validation to fix it.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/8b5bacce2d13dbe648f0bfd3f738ecce8db4978cPatch
- https://git.kernel.org/stable/c/bc03c02cc1991a066b23e69bbcc0f66e8f1f7453Patch
- https://git.kernel.org/stable/c/d3887448486caeef9687fb5dfebd4ff91e0f25aaPatch
- https://git.kernel.org/stable/c/8b5bacce2d13dbe648f0bfd3f738ecce8db4978cPatch
- https://git.kernel.org/stable/c/bc03c02cc1991a066b23e69bbcc0f66e8f1f7453Patch
- https://git.kernel.org/stable/c/d3887448486caeef9687fb5dfebd4ff91e0f25aaPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.