{"id":"CVE-2024-49918","title":"drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer\n\nThis commit addresses a potential null pointer dereference issue in the…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 180280f3c4621d699d903773bb84bf7f0bc6a891","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 4f47292f488fa7041284dca1f1244116c18721f1","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 96d4c2ee18d732a248d053aae8c4a27cb1d68d1c","Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < ac2140449184a26eac99585b7f69814bd3ba8f2d","Linux 4.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-10-22T13:40:44.529990Z"},"published":"2024-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:35:21.059Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-49918","references":[{"url":"https://git.kernel.org/stable/c/180280f3c4621d699d903773bb84bf7f0bc6a891"},{"url":"https://git.kernel.org/stable/c/4f47292f488fa7041284dca1f1244116c18721f1"},{"url":"https://git.kernel.org/stable/c/96d4c2ee18d732a248d053aae8c4a27cb1d68d1c"},{"url":"https://git.kernel.org/stable/c/ac2140449184a26eac99585b7f69814bd3ba8f2d"}],"tags":["cve.org"],"epss":0.00285,"epssPercentile":0.20848,"ingestedAt":"2026-10-21T12:48:53.729Z","slug":"CVE-2024-49918","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn32_acquire_idle_pipe_for_head_pipe_in_layer` function. The issue\ncould occur when `head_pipe` is null.\n\nThe fix adds a check to ensure `head_pipe` is not null before asserting\nit. If `head_pipe` is null, the function returns NULL to prevent a\npotential null pointer dereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn32/dcn32_resource.c:2690 dcn32_acquire_idle_pipe_for_head_pipe_in_layer() error: we previously assumed 'head_pipe' could be null (see line 2681)\n\n## Affected\n\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 180280f3c4621d699d903773bb84bf7f0bc6a891`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 4f47292f488fa7041284dca1f1244116c18721f1`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < 96d4c2ee18d732a248d053aae8c4a27cb1d68d1c`\n- `Linux >= 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c < ac2140449184a26eac99585b7f69814bd3ba8f2d`\n- `Linux 4.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}