Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A potential null pointer dereference vulnerability has been addressed in the Linux kernel's AMD display driver. This issue was found in the 'dm_resume' function, where it was assumed that 'aconnector->dc_link' would never be null. The vulnerability could lead to a null dereference, causing a crash or undefined behavior. The issue has been fixed by adding a check for a null 'dc_link' at the beginning of the loop, allowing the function to skip further processing for connectors without a valid link.
The vulnerability could lead to a null pointer dereference, causing a crash or undefined behavior in the system.
The vulnerability can be reproduced by using a version of the Linux kernel prior to the patch that addresses this issue, with a graphics card that requires the AMD display driver. When the 'dm_resume' function is called, the absence of a valid 'dc_link' for a connector can lead to a null pointer dereference.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.