Back to CVE records
Medium 5.5Published Sep 27, 2024

CVE-2024-46808drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range

Updated under an hour ago ()

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range [Why & How] ASSERT if return NULL from kcalloc.

CVSS
5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Modified
Record last updated
Oct 21, 2026
First seen by InfoSec Signals
Oct 21, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c builds before 117df33ecfd8ab41cde8e582ec90d3cb8d82ee9d; from 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c before ca0b0b0a22306f2e51105ac48f4a09c2fbbb504e; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c builds before 5524fa301ba649f8cf00848f91468e0ba7e4f24c
CNA record
linux linux_kernel
linux:linux_kernel
before 6.10.9
NVD

References

  • patch
  • patch

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.