{
  "cveId": "CVE-2024-26728",
  "url": "https://patchblox.com/security/cve/CVE-2024-26728",
  "summary": "CVE-2024-26728 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-26728, released April 3, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: fix null-pointer dereference on...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: fix null-pointer dereference on edid reading  Use i2c adapter when there isn\u0027t aux_mode in dc_link to fix a null-pointer derefence that happens when running igt@kms_force_connector_basic in a system with DCN2.1 and HDMI connector detected as below:  [  \u002B0.178146] BUG: kernel NULL pointer dereference, address: 00000000000004c0 [  \u002B0.000010] #PF: supervisor read access in kernel mode [  \u002B0.000005] #PF: error_code(0x0000) - not-present page [  \u002B0.000004] PGD 0 P4D 0 [  \u002B0.000006] Oops: 0000 [#1] PREEMPT SMP NOPTI [  \u002B0.000006] CPU: 15 PID: 2368 Comm: kms_force_conne Not tainted 6.5.0-asdn\u002B #152 [  \u002B0.000005] Hardware name: HP HP ENVY x360 Convertible 13-ay1xxx/8929, BIOS F.01 07/14/2021 [  \u002B0.000004] RIP: 0010:i2c_transfer\u002B0xd/0x100 [  \u002B0.000011] Code: ea fc ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 54 55 53 \u003C48\u003E 8b 47 10 48 89 fb 48 83 38 00 0f 84 b3 00 00 00 83 3d 2f 80 16 [  \u002B0.000004] RSP: 0018:ffff9c4f89c0fad0 EFLAGS: 00010246 [  \u002B0.000005] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000080 [  \u002B0.000003] RDX: 0000000000000002 RSI: ffff9c4f89c0fb20 RDI: 00000000000004b0 [  \u002B0.000003] RBP: ffff9c4f89c0fb80 R08: 0000000000000080 R09: ffff8d8e0b15b980 [  \u002B0.000003] R10: 00000000000380e0 R11: 0000000000000000 R12: 0000000000000080 [  \u002B0.000002] R13: 0000000000000002 R14: ffff9c4f89c0fb0e R15: ffff9c4f89c0fb0f [  \u002B0.000004] FS:  00007f9ad2176c40(0000) GS:ffff8d90fe9c0000(0000) knlGS:0000000000000000 [  \u002B0.000003] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [  \u002B0.000004] CR2: 00000000000004c0 CR3: 0000000121bc4000 CR4: 0000000000750ee0 [  \u002B0.000003] PKRU: 55555554 [  \u002B0.000003] Call Trace: [  \u002B0.000006]  \u003CTASK\u003E [  \u002B0.000006]  ? __die\u002B0x23/0x70 [  \u002B0.000011]  ? page_fault_oops\u002B0x17d/0x4c0 [  \u002B0.000008]  ? preempt_count_add\u002B0x6e/0xa0 [  \u002B0.000008]  ? srso_alias_return_thunk\u002B0x5/0x7f [  \u002B0.000011]  ? exc_page_fault\u002B0x7f/0x180 [  \u002B0.000009]  ? asm_exc_page_fault\u002B0x26/0x30 [  \u002B0.000013]  ? i2c_transfer\u002B0xd/0x100 [  \u002B0.000010]  drm_do_probe_ddc_edid\u002B0xc2/0x140 [drm] [  \u002B0.000067]  ? srso_alias_return_thunk\u002B0x5/0x7f [  \u002B0.000006]  ? _drm_do_get_edid\u002B0x97/0x3c0 [drm] [  \u002B0.000043]  ? __pfx_drm_do_probe_ddc_edid\u002B0x10/0x10 [drm] [  \u002B0.000042]  edid_block_read\u002B0x3b/0xd0 [drm] [  \u002B0.000043]  _drm_do_get_edid\u002B0xb6/0x3c0 [drm] [  \u002B0.000041]  ? __pfx_drm_do_probe_ddc_edid\u002B0x10/0x10 [drm] [  \u002B0.000043]  drm_edid_read_custom\u002B0x37/0xd0 [drm] [  \u002B0.000044]  amdgpu_dm_connector_mode_valid\u002B0x129/0x1d0 [amdgpu] [  \u002B0.000153]  drm_connector_mode_valid\u002B0x3b/0x60 [drm_kms_helper] [  \u002B0.000000]  __drm_helper_update_and_validate\u002B0xfe/0x3c0 [drm_kms_helper] [  \u002B0.000000]  ? amdgpu_dm_connector_get_modes\u002B0xb6/0x520 [amdgpu] [  \u002B0.000000]  ? srso_alias_return_thunk\u002B0x5/0x7f [  \u002B0.000000]  drm_helper_probe_single_connector_modes\u002B0x2ab/0x540 [drm_kms_helper] [  \u002B0.000000]  status_store\u002B0xb2/0x1f0 [drm] [  \u002B0.000000]  kernfs_fop_write_iter\u002B0x136/0x1d0 [  \u002B0.000000]  vfs_write\u002B0x24d/0x440 [  \u002B0.000000]  ksys_write\u002B0x6f/0xf0 [  \u002B0.000000]  do_syscall_64\u002B0x60/0xc0 [  \u002B0.000000]  ? srso_alias_return_thunk\u002B0x5/0x7f [  \u002B0.000000]  ? syscall_exit_to_user_mode\u002B0x2b/0x40 [  \u002B0.000000]  ? srso_alias_return_thunk\u002B0x5/0x7f [  \u002B0.000000]  ? do_syscall_64\u002B0x6c/0xc0 [  \u002B0.000000]  ? do_syscall_64\u002B0x6c/0xc0 [  \u002B0.000000]  entry_SYSCALL_64_after_hwframe\u002B0x6e/0xd8 [  \u002B0.000000] RIP: 0033:0x7f9ad46b4b00 [  \u002B0.000000] Code: 40 00 48 8b 15 19 b3 0d 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d e1 3a 0e 00 00 74 17 b8 01 00 00 00 0f 05 \u003C48\u003E 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [  \u002B0.000000] RSP: 002b:00007ffcbd3bd6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [  \u002B0.000000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9ad46b4b00 [  \u002B0.000000] RDX: 0000000000000002 RSI: 00007f9ad48a7417 RDI: 0000000000000009 [  \u002B0.000000] RBP: 0000000000000002 R08 ---truncated---",
  "published": "2024-04-03T17:15:50Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00217,
  "epssPercentile": 0.12282,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.7.7-1",
      "fix": "DEBIAN-CVE-2024-26728",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26728",
      "released": "2024-04-03T17:15:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.7.7-1",
      "fix": "DEBIAN-CVE-2024-26728",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26728",
      "released": "2024-04-03T17:15:50Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}