Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-p9dx-t5wf-9fhb
Vulnerability ID VCID-p9dx-t5wf-9fhb
Aliases CVE-2024-27041
Summary In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini() Since 'adev->dm.dc' in amdgpu_dm_fini() might turn out to be NULL before the call to dc_enable_dmub_notifications(), check beforehand to ensure there will not be a possible NULL-ptr-deref there. Also, since commit 1e88eb1b2c25 ("drm/amd/display: Drop CONFIG_DRM_AMD_DC_HDCP") there are two separate checks for NULL in 'adev->dm.dc' before dc_deinit_callbacks() and dc_dmub_srv_destroy(). Clean up by combining them all under one 'if'. Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.
Status Published
Exploitability 0.5
Weighted Severity 5.0
Risk 2.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 5.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-27041.json
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2024-27041
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2024-27041
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2024-27041
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 5.5 https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b
ssvc Track https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b
cvssv3.1 5.5 https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c
ssvc Track https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c
cvssv3.1 5.5 https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957
ssvc Track https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957
cvssv3.1 5.5 https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811
ssvc Track https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-27041.json
https://api.first.org/data/v1/epss?cve=CVE-2024-27041
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1c62697e4086de988b31124fb8c79c244ea05f2b https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b
2278450 https://bugzilla.redhat.com/show_bug.cgi?id=2278450
2a3cfb9a24a28da9cc13d2c525a76548865e182c https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c
ca2eb375db76fd50f31afdd67d6ca4f833254957 https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957
e040f1fbe9abae91b12b074cfc3bbb5367b79811 https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811
USN-6816-1 https://usn.ubuntu.com/6816-1/
USN-6817-1 https://usn.ubuntu.com/6817-1/
USN-6817-2 https://usn.ubuntu.com/6817-2/
USN-6817-3 https://usn.ubuntu.com/6817-3/
USN-6878-1 https://usn.ubuntu.com/6878-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-27041.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-24T14:44:31Z/ Found at https://git.kernel.org/stable/c/1c62697e4086de988b31124fb8c79c244ea05f2b
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-24T14:44:31Z/ Found at https://git.kernel.org/stable/c/2a3cfb9a24a28da9cc13d2c525a76548865e182c
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-24T14:44:31Z/ Found at https://git.kernel.org/stable/c/ca2eb375db76fd50f31afdd67d6ca4f833254957
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-24T14:44:31Z/ Found at https://git.kernel.org/stable/c/e040f1fbe9abae91b12b074cfc3bbb5367b79811
Exploit Prediction Scoring System (EPSS)
Percentile 0.04936
EPSS Score 0.00018
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:50:15.801219+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0