{"id":"CVE-2024-43899","title":"drm/amd/display: Fix null pointer deref in dcn20_resource.c","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null pointer deref in dcn20_resource.c\n\nFixes a hang thats triggered when MPV is run on a DCN401 dGPU:\n\nmpv --hwdec=vaapi --vo=gpu --hwdec-codecs=a…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < dc4428bf483cb8335bb3377534d19b1b7e62ec5c","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 6940c1d0c84a34d5a2038714c218238101a1db5b","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 974fccd61758599a9716c4b909d9226749efe37e","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < ecbf60782662f0a388493685b85a645a0ba1613c","Linux 4.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-10T15:28:56.399311Z"},"published":"2024-08-26","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:19:06.589Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-43899","references":[{"url":"https://git.kernel.org/stable/c/dc4428bf483cb8335bb3377534d19b1b7e62ec5c"},{"url":"https://git.kernel.org/stable/c/6940c1d0c84a34d5a2038714c218238101a1db5b"},{"url":"https://git.kernel.org/stable/c/974fccd61758599a9716c4b909d9226749efe37e"},{"url":"https://git.kernel.org/stable/c/ecbf60782662f0a388493685b85a645a0ba1613c"}],"tags":["cve.org"],"epss":0.00211,"epssPercentile":0.11473,"ingestedAt":"2026-11-03T13:45:42.689Z","slug":"CVE-2024-43899","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null pointer deref in dcn20_resource.c\n\nFixes a hang thats triggered when MPV is run on a DCN401 dGPU:\n\nmpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all\n\nand then enabling fullscreen playback (double click on the video)\n\nThe following calltrace will be seen:\n\n[  181.843989] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[  181.843997] #PF: supervisor instruction fetch in kernel mode\n[  181.844003] #PF: error_code(0x0010) - not-present page\n[  181.844009] PGD 0 P4D 0\n[  181.844020] Oops: 0010 [#1] PREEMPT SMP NOPTI\n[  181.844028] CPU: 6 PID: 1892 Comm: gnome-shell Tainted: G        W  OE      6.5.0-41-generic #41~22.04.2-Ubuntu\n[  181.844038] Hardware name: System manufacturer System Product Name/CROSSHAIR VI HERO, BIOS 6302 10/23/2018\n[  181.844044] RIP: 0010:0x0\n[  181.844079] Code: Unable to access opcode bytes at 0xffffffffffffffd6.\n[  181.844084] RSP: 0018:ffffb593c2b8f7b0 EFLAGS: 00010246\n[  181.844093] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004\n[  181.844099] RDX: ffffb593c2b8f804 RSI: ffffb593c2b8f7e0 RDI: ffff9e3c8e758400\n[  181.844105] RBP: ffffb593c2b8f7b8 R08: ffffb593c2b8f9c8 R09: ffffb593c2b8f96c\n[  181.844110] R10: 0000000000000000 R11: 0000000000000000 R12: ffffb593c2b8f9c8\n[  181.844115] R13: 0000000000000001 R14: ffff9e3c88000000 R15: 0000000000000005\n[  181.844121] FS:  00007c6e323bb5c0(0000) GS:ffff9e3f85f80000(0000) knlGS:0000000000000000\n[  181.844128] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  181.844134] CR2: ffffffffffffffd6 CR3: 0000000140fbe000 CR4: 00000000003506e0\n[  181.844141] Call Trace:\n[  181.844146]  <TASK>\n[  181.844153]  ? show_regs+0x6d/0x80\n[  181.844167]  ? __die+0x24/0x80\n[  181.844179]  ? page_fault_oops+0x99/0x1b0\n[  181.844192]  ? do_user_addr_fault+0x31d/0x6b0\n[  181.844204]  ? exc_page_fault+0x83/0x1b0\n[  181.844216]  ? asm_exc_page_fault+0x27/0x30\n[  181.844237]  dcn20_get_dcc_compression_cap+0x23/0x30 [amdgpu]\n[  181.845115]  amdgpu_dm_plane_validate_dcc.constprop.0+0xe5/0x180 [amdgpu]\n[  181.845985]  amdgpu_dm_plane_fill_plane_buffer_attributes+0x300/0x580 [amdgpu]\n[  181.846848]  fill_dc_plane_info_and_addr+0x258/0x350 [amdgpu]\n[  181.847734]  fill_dc_plane_attributes+0x162/0x350 [amdgpu]\n[  181.848748]  dm_update_plane_state.constprop.0+0x4e3/0x6b0 [amdgpu]\n[  181.849791]  ? dm_update_plane_state.constprop.0+0x4e3/0x6b0 [amdgpu]\n[  181.850840]  amdgpu_dm_atomic_check+0xdfe/0x1760 [amdgpu]\n\n## Affected\n\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < dc4428bf483cb8335bb3377534d19b1b7e62ec5c`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 6940c1d0c84a34d5a2038714c218238101a1db5b`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 974fccd61758599a9716c4b909d9226749efe37e`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < ecbf60782662f0a388493685b85a645a0ba1613c`\n- `Linux 4.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}