Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-39498 Details

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 [Why] Commit: - commit 5aa1dfcdf0a4 ("drm/mst: Refactor the flow for payload allocation/removement") accidently overwrite the commit - commit 54d217406afe ("drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2") which cause regression. [How] Recover the original NULL fix and remove the unnecessary input parameter 'state' for drm_dp_add_payload_part2(). (cherry picked from commit 4545614c1d8da603e57b60dd66224d81b6ffc305)

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/5a507b7d2be15fddb95bf8dee01110b723e2bcd9	kernel.org	Patch
https://git.kernel.org/stable/c/8e21de5f99b2368a5155037ce0aae8aaba3f5241	kernel.org	Patch
https://git.kernel.org/stable/c/5a507b7d2be15fddb95bf8dee01110b723e2bcd9	CVE	Patch
https://git.kernel.org/stable/c/8e21de5f99b2368a5155037ce0aae8aaba3f5241	CVE	Patch

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 6.7, < 6.9.6
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
Sep 9, 2024	Initial Analysis	[email protected]
Jul 12, 2024	New CVE Received	kernel.org