In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes In psb_intel_lvds_get_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/13b5f3ee94bdbdc4b5f40582aab62977905aedee cve-icon cve-icon
https://git.kernel.org/stable/c/2df7aac81070987b0f052985856aa325a38debf6 cve-icon cve-icon
https://git.kernel.org/stable/c/46d2ef272957879cbe30a884574320e7f7d78692 cve-icon cve-icon
https://git.kernel.org/stable/c/475a5b3b7c8edf6e583a9eb59cf28ea770602e14 cve-icon cve-icon
https://git.kernel.org/stable/c/6735d02ead7dd3adf74eb8b70aebd09e0ce78ec9 cve-icon cve-icon
https://git.kernel.org/stable/c/7e52c62ff029f95005915c0a11863b5fb5185c8c cve-icon cve-icon
https://git.kernel.org/stable/c/d6ad202f73f8edba0cbc0065aa57a79ffe8fdcdc cve-icon cve-icon
https://git.kernel.org/stable/c/f70ffeca546452d1acd3a70ada56ecb2f3e7f811 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024081751-CVE-2024-42309-9560@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-42309 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-42309 cve-icon
History

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 22 Aug 2024 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Mon, 19 Aug 2024 19:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 19 Aug 2024 04:45:00 +0000

Type Values Removed Values Added
References

Sat, 17 Aug 2024 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes In psb_intel_lvds_get_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.
Title drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-08-17T09:09:14.164Z

Updated: 2025-05-04T09:26:27.984Z

Reserved: 2024-07-30T07:40:12.276Z

Link: CVE-2024-42309

cve-icon Vulnrichment

Updated: 2024-09-11T12:42:23.464Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-17T09:15:10.987

Modified: 2024-08-22T16:01:29.287

Link: CVE-2024-42309

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-08-17T00:00:00Z

Links: CVE-2024-42309 - Bugzilla