Skip to content
Heist/ feed
Back to feed
UnratedFix available

drm/amd/display: avoid using null object of framebuffer

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code when object is null to avoid using null object of framebuffer. (cherry picked from commit 73dd0ad9e5dad53766ea3e631303430116f834b3)

Products
Kernel
Affected versions
Not specified
Fixed versions
6.1.108, 6.10.8, 6.6.49
CVEs
CVE-2024-46694
Confirmed fixed CVEs
Not specified
Updated in this feed
7 Nov 2026, 11:36 UTC · Revision 1

Source evidence

drm/amd/display: avoid using null object of framebuffer

core-osv · Original source

Published 13 Sept 2024, 05:29 UTC

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code when object is null to avoid using null object of framebuffer. (cherry picked from commit 73dd0ad9e5dad53766ea3e631303430116f834b3)

osv:CVE-2024-46694

Kernel

Fixed versions: 6.1.108, 6.6.49, 6.10.8

Complete source record
{
  "id": "c1bff69408ea014a75b09dde9c924f9a6028fa3c3686eff9e2c2f89da55bf6ad",
  "url": "https://osv.dev/vulnerability/CVE-2024-46694",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "drm/amd/display: avoid using null object of framebuffer",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code when object is null to avoid using null object of framebuffer. (cherry picked from commit 73dd0ad9e5dad53766ea3e631303430116f834b3)",
    "evidence": "osv:CVE-2024-46694",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.108",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.49",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.10.8",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2024-46694",
      "aliases": [
        "CVE-2024-46694"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5d945cbcd4b16a29d6470a80dfb19738f9a4319f"
                },
                {
                  "fixed": "093ee72ed35c2338c87c26b6ba6f0b7789c9e14e"
                },
                {
                  "fixed": "f6f5e39a3fe7cbdba190f42b28b40bdff03c8cf0"
                },
                {
                  "fixed": "49e1b214f3239b78967c6ddb8f8ec47ae047b051"
                },
                {
                  "fixed": "3b9a33235c773c7a3768060cf1d2cf8a9153bc37"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46694.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.0.0"
                },
                {
                  "fixed": "6.1.108"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.49"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.10.8"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46694.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:50.935323717Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/093ee72ed35c2338c87c26b6ba6f0b7789c9e14e",
        "https://git.kernel.org/stable/c/3b9a33235c773c7a3768060cf1d2cf8a9153bc37",
        "https://git.kernel.org/stable/c/49e1b214f3239b78967c6ddb8f8ec47ae047b051",
        "https://git.kernel.org/stable/c/f6f5e39a3fe7cbdba190f42b28b40bdff03c8cf0",
        "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46694.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-46694",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46694.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-46694",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 519151,
  "published_at": "2024-09-13T05:29:22.889+00:00"
}