In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
The function performs a check on the "ctx" input parameter, however, it is used before the check.
Initialize the "base" variable after the sanity check to avoid a possible NULL pointer dereference.
Addresses-Coverity-ID: 1493866 ("Null pointer dereference")
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base | Aug 9, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub