---
id: CVE-2024-26661
title: 'drm/amd/display: Add NULL test for ''timing generator'' in ''dcn21_set_pipe()'''
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'

  In "u32 otg_inst = pipe_ctx->stream_res.tg->inst;"
  pipe_ctx->stream_res.tg could be NULL, i…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: adp
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 <
    e3bc103045c51271c3e7a808efb187a354678b7d
  - >-
    Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 <
    3f3c237a706580326d3b7a1b97697e5031ca4667
  - >-
    Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 <
    39f24c08363af1cd945abad84e3c87fd3e3c845a
  - >-
    Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 <
    66951d98d9bf45ba25acf37fe0747253fafdf298
  - Linux 5.9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-04-02T17:47:14.668657Z'
published: '2024-04-02'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:17:43.342Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-26661'
references:
  - url: 'https://git.kernel.org/stable/c/e3bc103045c51271c3e7a808efb187a354678b7d'
  - url: 'https://git.kernel.org/stable/c/3f3c237a706580326d3b7a1b97697e5031ca4667'
  - url: 'https://git.kernel.org/stable/c/39f24c08363af1cd945abad84e3c87fd3e3c845a'
  - url: 'https://git.kernel.org/stable/c/66951d98d9bf45ba25acf37fe0747253fafdf298'
tags:
  - cve.org
epss: 0.00225
epssPercentile: 0.13244
ingestedAt: '2026-11-03T11:43:15.791Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'

In "u32 otg_inst = pipe_ctx->stream_res.tg->inst;"
pipe_ctx->stream_res.tg could be NULL, it is relying on the caller to
ensure the tg is not NULL.

## Affected

- `Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 < e3bc103045c51271c3e7a808efb187a354678b7d`
- `Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 < 3f3c237a706580326d3b7a1b97697e5031ca4667`
- `Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 < 39f24c08363af1cd945abad84e3c87fd3e3c845a`
- `Linux >= 474ac4a875ca6fea3fc5183d3ad22ef7523dca53 < 66951d98d9bf45ba25acf37fe0747253fafdf298`
- `Linux 5.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.