Aurabindo Pillai

The issue is related to a null pointer dereference in the `dcn20 resource.c` file of the Linux kernel's `drm/amd/display` module. This vulnerability can cause a hang when running MPV on a DCN401 dGPU with specific settings, such as `mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all`, and then enabling fullscreen playback. The call trace shows a kernel NULL pointer dereference at address 0000000000000000.

A NULL pointer dereference vulnerability has been resolved in the Linux kernel, specifically in the drm/amd/display component. The issue occurs when the color log tries to read the gamut remap information from DCN401, which is not initialized in the dcn401 dpp funcs, leading to a null pointer dereference. This vulnerability is addressed by adding a proper guard to access the gamut remap callback in case the specific ASIC did not implement this function. The vulnerability can be triggered by running the command `cat /sys/kernel/debug/dri/0/amdgpu dm dtn log`.

There is a potential memory access violation while iterating through an array of dcn35 clks. This issue can be resolved by limiting iteration per array size.

The issue is related to the drm/amd/display component of the Linux kernel, where two problems have been fixed: a comparison with a wider integer type in a loop condition that can cause infinite loops, and a pointer dereference before a null check.

An array index out of bounds error exists in the DCN32 DML component of the AMD display driver. The issue occurs within the `vba vars st{}` structure of the `drivers/gpu/drm/amd/display/dc/dml/display mode vba.h` module, where the `LinkCapacitySupport` array is indexed using the number of voltage states instead of the maximum number of DPPs. This improper indexing can be exploited to cause a denial of service.