Wind River Support Network

HomeDefectsLIN1021-7905
Fixed

LIN1021-7905 : Security Advisory - linux - CVE-2024-26649

Created: Mar 26, 2024    Updated: May 31, 2024
Resolved Date: May 31, 2024
Found In Version: 10.21.20.1
Fix Version: 10.21.20.21
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix the null pointer when load rlc firmware

If the RLC firmware is invalid because of wrong header size,
the pointer to the rlc firmware is released in function
amdgpu_ucode_request. There will be a null pointer error
in subsequent use. So skip validation to fix it.

CREATE(Triage):(User=admin) CVE-2024-26649 (https://nvd.nist.gov/vuln/detail/CVE-2024-26649)

CVEs


Live chat
Online