VulnerabilityAnalyzed

CVE-2024-43906

In the Linux kernel, the following vulnerability has been resolved: drm/admgpu: fix dereferencing null pointer context When user space sets an invalid ta type, the pointer context will be empty.

MEDIUM 5.5EPSS 0.21%

Does this matter?

Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/admgpu: fix dereferencing null pointer context When user space sets an invalid ta type, the pointer context will be empty. So it need to check the pointer context before using it

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.21% probability · 11th percentile
CISA KEV: Not listed
Weakness: CWE-476
Affected: linux/linux kernel
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

References

https://git.kernel.org/stable/c/030ffd4d43b433bc6671d9ec34fc12c59220b95dPatch
https://git.kernel.org/stable/c/4fd52f7c2c11d330571c6bde06e5ea508ec25c9dPatch
https://git.kernel.org/stable/c/641dac64178ccdb9e45c92b67120316896294d05Patch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.