CVE-2024-43899

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-41-generic #41~22.04.2-Ubuntu

Description The issue is related to a null pointer dereference in the dcn20 resource.c file of the Linux kernel's drm/amd/display module. This vulnerability can cause a hang when running MPV on a DCN401 dGPU with specific settings, such as mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all, and then enabling fullscreen playback. The call trace shows a kernel NULL pointer dereference at address 0000000000000000.

Recommendations To resolve this issue, update the Linux kernel to a version newer than 6.5.0-41-generic #41~22.04.2-Ubuntu. As a temporary workaround, consider avoiding the use of MPV with the specified settings on affected systems until a patch is available.