CVE-2024-43903 - Vulnerability Details

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2024082620-CVE-2024-43903-3644@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-43903
https://www.cve.org/CVERecord?id=CVE-2024-43903

History

Thu, 19 Dec 2024 12:45:00 +0000

Type	Values Removed	Values Added
CPEs	cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products	Linux Linux linux Kernel
References	https://git.kernel.org/stable/c/31a679a880102dee6e10985a7b1789af8dc328cc https://git.kernel.org/stable/c/38e6f715b02b572f74677eb2f29d3b4bc6f1ddff https://git.kernel.org/stable/c/94220b35aeba2b68da81deeefbb784d94eeb5c04 https://git.kernel.org/stable/c/ce5d090af683137cb779ed7e3683839f9c778b35
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}`

Thu, 19 Dec 2024 12:15:00 +0000

Type	Values Removed	Values Added
Title	drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update	kernel: drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 19 Dec 2024 11:45:00 +0000

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update This commit adds a null check for the 'afb' variable in the amdgpu_dm_plane_handle_cursor_update function. Previously, 'afb' was assumed to be null, but was used later in the code without a null check. This could potentially lead to a null pointer dereference. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_plane.c:1298 amdgpu_dm_plane_handle_cursor_update() error: we previously assumed 'afb' could be null (see line 1252)	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 27 Aug 2024 19:00:00 +0000

Type	Values Removed	Values Added
Metrics	threat_severity `Moderate`	threat_severity `Low`

Tue, 27 Aug 2024 15:30:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2024082620-CVE-2024-43903-3644@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2024-43903 https://www.cve.org/CVERecord?id=CVE-2024-43903
Metrics	threat_severity `None`	threat_severity `Moderate`

Tue, 27 Aug 2024 14:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		CWE-476
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Mon, 26 Aug 2024 10:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update This commit adds a null check for the 'afb' variable in the amdgpu_dm_plane_handle_cursor_update function. Previously, 'afb' was assumed to be null, but was used later in the code without a null check. This could potentially lead to a null pointer dereference. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_plane.c:1298 amdgpu_dm_plane_handle_cursor_update() error: we previously assumed 'afb' could be null (see line 1252)
Title		drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update
References		https://git.kernel.org/stable/c/31a679a880102dee6e10985a7b1789af8dc328cc https://git.kernel.org/stable/c/38e6f715b02b572f74677eb2f29d3b4bc6f1ddff https://git.kernel.org/stable/c/94220b35aeba2b68da81deeefbb784d94eeb5c04 https://git.kernel.org/stable/c/ce5d090af683137cb779ed7e3683839f9c778b35

MITRE

Status: REJECTED

Assigner: Linux

Published: 2024-08-26T10:11:03.529Z

Updated: 2024-12-19T11:30:47.579Z

Reserved: 2024-08-17T09:11:59.292Z

Link: CVE-2024-43903

Vulnrichment

Updated:

NVD

Status : Rejected

Published: 2024-08-26T11:15:04.793

Modified: 2024-12-19T12:15:07.040

Link: CVE-2024-43903

Redhat

Severity : Low

Publid Date: 2024-08-26T00:00:00Z

Links: CVE-2024-43903 - Bugzilla

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object