CVE-2024-53060
AMDGPU Linux Kernel Null Pointer Dereference
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in dereferencing buffer.pointer (obj) while being NULL. Although this case may be unrealistic for the current code, it is still better to protect against possible bugs. Bail out also when status is AE_NOT_FOUND. This fixes 1 FORWARD_NULL issue reported by Coverity Report: CID 1600951: Null pointer dereferences (FORWARD_NULL) (cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1)
INFO
Published Date :
Nov. 19, 2024, 6:15 p.m.
Last Modified :
Dec. 3, 2024, 8:49 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-53060.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-53060 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-53060 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Dec. 03, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NIST CWE-476 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.19.324 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.286 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.230 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.172 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.117 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.61 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.11.8 *cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:* Changed Reference Type https://git.kernel.org/stable/c/1a9f55ed5b512f510ccd21ad527d532e60550e80 No Types Assigned https://git.kernel.org/stable/c/1a9f55ed5b512f510ccd21ad527d532e60550e80 Patch Changed Reference Type https://git.kernel.org/stable/c/27fc29b5376998c126c85cf9b15d9dfc2afc9cbe No Types Assigned https://git.kernel.org/stable/c/27fc29b5376998c126c85cf9b15d9dfc2afc9cbe Patch Changed Reference Type https://git.kernel.org/stable/c/2ac7f253deada4d449559b65a1c1cd0a6f6f19b7 No Types Assigned https://git.kernel.org/stable/c/2ac7f253deada4d449559b65a1c1cd0a6f6f19b7 Patch Changed Reference Type https://git.kernel.org/stable/c/8d7a28eca7553d35d4ce192fa1f390f2357df41b No Types Assigned https://git.kernel.org/stable/c/8d7a28eca7553d35d4ce192fa1f390f2357df41b Patch Changed Reference Type https://git.kernel.org/stable/c/a613a392417532ca5aaf3deac6e3277aa7aaef2b No Types Assigned https://git.kernel.org/stable/c/a613a392417532ca5aaf3deac6e3277aa7aaef2b Patch Changed Reference Type https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e No Types Assigned https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e Patch Changed Reference Type https://git.kernel.org/stable/c/b9d9881237afeb52eddd70077b7174bf17e2fa30 No Types Assigned https://git.kernel.org/stable/c/b9d9881237afeb52eddd70077b7174bf17e2fa30 Patch Changed Reference Type https://git.kernel.org/stable/c/ce8a00a00e36f61f5a1e47734332420b68784c43 No Types Assigned https://git.kernel.org/stable/c/ce8a00a00e36f61f5a1e47734332420b68784c43 Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Dec. 02, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 28, 2024
Action Type Old Value New Value Removed Reference https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 19, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in dereferencing buffer.pointer (obj) while being NULL. Although this case may be unrealistic for the current code, it is still better to protect against possible bugs. Bail out also when status is AE_NOT_FOUND. This fixes 1 FORWARD_NULL issue reported by Coverity Report: CID 1600951: Null pointer dereferences (FORWARD_NULL) (cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1) Added Reference kernel.org https://git.kernel.org/stable/c/ce8a00a00e36f61f5a1e47734332420b68784c43 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/8d7a28eca7553d35d4ce192fa1f390f2357df41b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/2ac7f253deada4d449559b65a1c1cd0a6f6f19b7 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/27fc29b5376998c126c85cf9b15d9dfc2afc9cbe [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1a9f55ed5b512f510ccd21ad527d532e60550e80 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a613a392417532ca5aaf3deac6e3277aa7aaef2b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/b9d9881237afeb52eddd70077b7174bf17e2fa30 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-53060 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-53060
weaknesses.