CVE-2024-49905

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: A null pointer dereference issue has been resolved in the Linux kernel. The problem occurred because the afb variable in the amdgpu dm plane handle cursor update function was assumed to be null but was used later in the code without a null check. This could potentially lead to a null pointer dereference. The issue has been fixed by adding a null check for the afb variable.

Recommendations: For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider disabling the amdgpu dm plane handle cursor update function until a patch is available. Restrict access to the vulnerable module amdgpu dm plane to minimize the risk of exploitation. Avoid using the afb variable in the affected code until the issue is resolved.