Linux Kernel NULL Pointer Dereference Vulnerability in AMD Display Driver

A vulnerability in the Linux kernel's AMD display driver can lead to a NULL pointer dereference. This issue occurs in versions of the kernel prior to 6.16.0-99-custom, when the IGT kms_cursor_legacy test performs a non-blocking mode set while an atomic cursor is active. The vulnerability can be reproduced with an eDP panel and DP monitors connected, causing a kernel crash due to the invalid memory access.

Impact

Exploitation of this vulnerability causes a kernel panic due to a NULL pointer dereference, disrupting system operations and potentially leading to a denial of service.

Reproduction

The vulnerability can be reproduced by running the IGT kms_cursor_legacy test with an eDP panel and DisplayPort monitors connected. The test will trigger a long non-blocking mode set while an atomic cursor is active, leading to a NULL pointer dereference in the AMD display driver.

Remediation

Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.