# CVE-2024-47720: linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for set_output_g... CVE-2024-47720 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-47720, released October 21, 2024. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2024-47720 - Priority: Routine - CVSS: 5.5 (medium) - EPSS: 0.0022 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 21, 2024 ## Description In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func This commit adds a null check for the set_output_gamma function pointer in the dcn30_set_output_transfer_func function. Previously, set_output_gamma was being checked for nullity at line 386, but then it was being dereferenced without any nullity check at line 401. This could potentially lead to a null pointer dereference error if set_output_gamma is indeed null. To fix this, we now ensure that set_output_gamma is not null before dereferencing it. We do this by adding a nullity check for set_output_gamma before the call to set_output_gamma at line 401. If set_output_gamma is null, we log an error message and do not call the function. This fix prevents a potential null pointer dereference error. drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c:401 dcn30_set_output_transfer_func() error: we previously assumed 'mpc->funcs->set_output_gamma' could be null (see line 386) drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c 373 bool dcn30_set_output_transfer_func(struct dc *dc, 374 struct pipe_ctx *pipe_ctx, 375 const struct dc_stream_state *stream) 376 { 377 int mpcc_id = pipe_ctx->plane_res.hubp->inst; 378 struct mpc *mpc = pipe_ctx->stream_res.opp->ctx->dc->res_pool->mpc; 379 const struct pwl_params *params = NULL; 380 bool ret = false; 381 382 /* program OGAM or 3DLUT only for the top pipe*/ 383 if (pipe_ctx->top_pipe == NULL) { 384 /*program rmu shaper and 3dlut in MPC*/ 385 ret = dcn30_set_mpc_shaper_3dlut(pipe_ctx, stream); 386 if (ret == false && mpc->funcs->set_output_gamma) { ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ If this is NULL 387 if (stream->out_transfer_func.type == TF_TYPE_HWPWL) 388 params = &stream->out_transfer_func.pwl; 389 else if (pipe_ctx->stream->out_transfer_func.type == 390 TF_TYPE_DISTRIBUTED_POINTS && 391 cm3_helper_translate_curve_to_hw_format( 392 &stream->out_transfer_func, 393 &mpc->blender_params, false)) 394 params = &mpc->blender_params; 395 /* there are no ROM LUTs in OUTGAM */ 396 if (stream->out_transfer_func.type == TF_TYPE_PREDEFINED) 397 BREAK_TO_DEBUGGER(); 398 } 399 } 400 --> 401 mpc->funcs->set_output_gamma(mpc, mpcc_id, params); ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Then it will crash 402 return ret; 403 } ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | bpftool ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.2 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.17.2 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-coco_debug sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-livepatch-SLE15-SP6-RT_Update_5 sles 15.6 | 1-150600.1.3.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-livepatch-SLE15-SP6_Update_6 sles 15.6 | 1-150600.13.3.5 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-source sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-source-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-syms-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-uek ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-core ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-core ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-devel ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-devel ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-doc ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-doc ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | linux Debian 12.15 (bookworm) | 6.1.115-1 | [DEBIAN-CVE-2024-47720](https://patchblox.com/security/data/fix/linux/debian-cve-2024-47720.md) | Oct 21, 2024 | | Linux | linux Debian 13.5 (trixie) | 6.11.2-1 | [DEBIAN-CVE-2024-47720](https://patchblox.com/security/data/fix/linux/debian-cve-2024-47720.md) | Oct 21, 2024 | | Linux | linux Debian 14 | 6.11.2-1 | [DEBIAN-CVE-2024-47720](https://patchblox.com/security/data/fix/linux/debian-cve-2024-47720.md) | Oct 21, 2024 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.