{"id":"CVE-2024-49914","title":"drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe\n\nThis commit addresses a null pointer dereference issue in the\n`dcn20_program_pipe` func…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 21c613e1c6ae45bb29ebc156d22060f034cc5665","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 68f75e6f08aad66069a629db8d7840919156c761","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 65a6fee22d5cfa645cb05489892dc9cd3d142fc2","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 8e4ed3cf1642df0c4456443d865cff61a9598aa8","Linux 4.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-10-22T13:41:14.762720Z"},"published":"2024-10-21","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:19:35.058Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-49914","references":[{"url":"https://git.kernel.org/stable/c/21c613e1c6ae45bb29ebc156d22060f034cc5665"},{"url":"https://git.kernel.org/stable/c/68f75e6f08aad66069a629db8d7840919156c761"},{"url":"https://git.kernel.org/stable/c/65a6fee22d5cfa645cb05489892dc9cd3d142fc2"},{"url":"https://git.kernel.org/stable/c/8e4ed3cf1642df0c4456443d865cff61a9598aa8"}],"tags":["cve.org"],"epss":0.00244,"epssPercentile":0.15685,"ingestedAt":"2026-11-03T13:45:42.699Z","slug":"CVE-2024-49914","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe\n\nThis commit addresses a null pointer dereference issue in the\n`dcn20_program_pipe` function. The issue could occur when\n`pipe_ctx->plane_state` is null.\n\nThe fix adds a check to ensure `pipe_ctx->plane_state` is not null\nbefore accessing. This prevents a null pointer dereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn20/dcn20_hwseq.c:1925 dcn20_program_pipe() error: we previously assumed 'pipe_ctx->plane_state' could be null (see line 1877)\n\n## Affected\n\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 21c613e1c6ae45bb29ebc156d22060f034cc5665`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 68f75e6f08aad66069a629db8d7840919156c761`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 65a6fee22d5cfa645cb05489892dc9cd3d142fc2`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 8e4ed3cf1642df0c4456443d865cff61a9598aa8`\n- `Linux 4.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}