NVD Vulnerability Detail

CVE-2024-46810

Summary	In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ Make sure the connector is fully initialized before signalling any HPD events via drm_kms_helper_hotplug_event(), otherwise this may lead to NULL pointer dereference.
Publication Date	Sept. 27, 2024, 10:15 p.m.
Registration Date	Sept. 28, 2024, 5 a.m.
Last Update	Oct. 5, 2024, 2:43 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/adc5674c23b8191e596ed0dbaa9600265ac896a8	Patch
2	https://git.kernel.org/stable/c/e1b121f21bbc56a6ae035aa5b77daac62bfb9be5	Patch
3	https://git.kernel.org/stable/c/9d567126474e68f959b2c2543c375f3bb32e948a	Patch
4	https://git.kernel.org/stable/c/1fb13693953737783b424aa4712f0a27a9eaf5a8	Patch
5	https://git.kernel.org/stable/c/162e48cb1d84c2c966b649b8ac5c9d4f75f6d44f	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-476	NULL ポインタデリファレンス	https://cwe.mitre.org/data/definitions/476.html

JVN Vulnerability Information

Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性

Title	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性
Summary	Linux の Linux Kernel には、NULL ポインタデリファレンスに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 10, 2024, midnight
Registration Date	Oct. 7, 2024, 1:44 p.m.
Last Update	Oct. 7, 2024, 1:44 p.m.

Affected System

Linux

Linux Kernel 5.15.167 未満

Linux Kernel 5.16 以上 6.1.109 未満

Linux Kernel 6.2 以上 6.6.50 未満

Linux Kernel 6.7 以上 6.10.9 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-46810	https://www.cve.org/CVERecord?id=CVE-2024-46810
National Vulnerability Database (NVD)
2	CVE-2024-46810	https://nvd.nist.gov/vuln/detail/CVE-2024-46810

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-476	http://cwe.mitre.org/data/definitions/476.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (162e48c)	https://git.kernel.org/stable/c/162e48cb1d84c2c966b649b8ac5c9d4f75f6d44f
2	drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (1fb1369)	https://git.kernel.org/stable/c/1fb13693953737783b424aa4712f0a27a9eaf5a8
3	drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (9d56712)	https://git.kernel.org/stable/c/9d567126474e68f959b2c2543c375f3bb32e948a
4	drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (adc5674)	https://git.kernel.org/stable/c/adc5674c23b8191e596ed0dbaa9600265ac896a8
5	drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (e1b121f)	https://git.kernel.org/stable/c/e1b121f21bbc56a6ae035aa5b77daac62bfb9be5
Linux Kernel
6	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月07日] 掲載	Oct. 7, 2024, 1:44 p.m.