CVE-2024-53201

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2024-12-27 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe This commit addresses a null pointer dereference issue in dcn20_program_pipe(). Previously, commit 8e4ed3cf1642 ("drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe") partially fixed the null pointer dereference issue. However, in dcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and plane_state is accessed again through pipe_ctx. Multiple if statements directly call attributes of plane_state, leading to potential null pointer dereference issues. This patch adds necessary null checks to ensure stability.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Linux Linux 21c613e1c6ae45bb29ebc156d22060f034cc5665 < 82f7058ce05c1fad8573950c50bb5befafe7e787
Linux Linux 68f75e6f08aad66069a629db8d7840919156c761 < 0335fb698ab0415d87650bc7a0f465c563ddec7d
Linux Linux 65a6fee22d5cfa645cb05489892dc9cd3d142fc2 < 6b4ee2560d4d8de2688da68cd9581177035e0876
Linux Linux 8e4ed3cf1642df0c4456443d865cff61a9598aa8 < 3609259326171cd5b98462636580fb2ae5c87d40
Linux Linux 8e4ed3cf1642df0c4456443d865cff61a9598aa8 < 6a057072ddd127255350357dd880903e8fa23f36
Linux Linux 6.6.64 < 6.6.160
Linux Linux 6.11.3 < 6.11.11
Linux Linux 6.12
linux linux_kernel 6.6.64 – 6.7

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.26%
Raw Score 0.002620
Percentile 18.0%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00262
2026-10-29
0.00262

Intelligence Sources

mitre ref →
nvd ref →