{
  "cveId": "CVE-2024-43901",
  "url": "https://patchblox.com/security/cve/CVE-2024-43901",
  "summary": "CVE-2024-43901 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-43901, released August 26, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401  When users run the command:  cat /sys/kernel/debug/dri/0/amdgpu_dm_dtn_log  The following NULL pointer dereference happens:  [  \u002B0.000003] BUG: kernel NULL pointer dereference, address: NULL [  \u002B0.000005] #PF: supervisor instruction fetch in kernel mode [  \u002B0.000002] #PF: error_code(0x0010) - not-present page [  \u002B0.000002] PGD 0 P4D 0 [  \u002B0.000004] Oops: 0010 [#1] PREEMPT SMP NOPTI [  \u002B0.000003] RIP: 0010:0x0 [  \u002B0.000008] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [...] [  \u002B0.000002] PKRU: 55555554 [  \u002B0.000002] Call Trace: [  \u002B0.000002]  \u003CTASK\u003E [  \u002B0.000003]  ? show_regs\u002B0x65/0x70 [  \u002B0.000006]  ? __die\u002B0x24/0x70 [  \u002B0.000004]  ? page_fault_oops\u002B0x160/0x470 [  \u002B0.000006]  ? do_user_addr_fault\u002B0x2b5/0x690 [  \u002B0.000003]  ? prb_read_valid\u002B0x1c/0x30 [  \u002B0.000005]  ? exc_page_fault\u002B0x8c/0x1a0 [  \u002B0.000005]  ? asm_exc_page_fault\u002B0x27/0x30 [  \u002B0.000012]  dcn10_log_color_state\u002B0xf9/0x510 [amdgpu] [  \u002B0.000306]  ? srso_alias_return_thunk\u002B0x5/0xfbef5 [  \u002B0.000003]  ? vsnprintf\u002B0x2fb/0x600 [  \u002B0.000009]  dcn10_log_hw_state\u002B0xfd0/0xfe0 [amdgpu] [  \u002B0.000218]  ? __mod_memcg_lruvec_state\u002B0xe8/0x170 [  \u002B0.000008]  ? srso_alias_return_thunk\u002B0x5/0xfbef5 [  \u002B0.000002]  ? debug_smp_processor_id\u002B0x17/0x20 [  \u002B0.000003]  ? srso_alias_return_thunk\u002B0x5/0xfbef5 [  \u002B0.000002]  ? srso_alias_return_thunk\u002B0x5/0xfbef5 [  \u002B0.000002]  ? set_ptes.isra.0\u002B0x2b/0x90 [  \u002B0.000004]  ? srso_alias_return_thunk\u002B0x5/0xfbef5 [  \u002B0.000002]  ? _raw_spin_unlock\u002B0x19/0x40 [  \u002B0.000004]  ? srso_alias_return_thunk\u002B0x5/0xfbef5 [  \u002B0.000002]  ? do_anonymous_page\u002B0x337/0x700 [  \u002B0.000004]  dtn_log_read\u002B0x82/0x120 [amdgpu] [  \u002B0.000207]  full_proxy_read\u002B0x66/0x90 [  \u002B0.000007]  vfs_read\u002B0xb0/0x340 [  \u002B0.000005]  ? __count_memcg_events\u002B0x79/0xe0 [  \u002B0.000002]  ? srso_alias_return_thunk\u002B0x5/0xfbef5 [  \u002B0.000003]  ? count_memcg_events.constprop.0\u002B0x1e/0x40 [  \u002B0.000003]  ? handle_mm_fault\u002B0xb2/0x370 [  \u002B0.000003]  ksys_read\u002B0x6b/0xf0 [  \u002B0.000004]  __x64_sys_read\u002B0x19/0x20 [  \u002B0.000003]  do_syscall_64\u002B0x60/0x130 [  \u002B0.000004]  entry_SYSCALL_64_after_hwframe\u002B0x6e/0x76 [  \u002B0.000003] RIP: 0033:0x7fdf32f147e2 [...]  This error happens when the color log tries to read the gamut remap information from DCN401 which is not initialized in the dcn401_dpp_funcs which leads to a null pointer dereference. This commit addresses this issue by adding a proper guard to access the gamut_remap callback in case the specific ASIC did not implement this function.",
  "published": "2024-08-26T11:15:04Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "NULL Pointer Dereference",
  "epss": 0.00182,
  "epssPercentile": 0.07819,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43901",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.10.6-1",
      "fix": "DEBIAN-CVE-2024-43901",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-43901",
      "released": "2024-08-26T11:15:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.10.6-1",
      "fix": "DEBIAN-CVE-2024-43901",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-43901",
      "released": "2024-08-26T11:15:04Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}