CVE-2024-26648

What it actually does

Null pointer dereference in edp_setup_replay() due to dereferencing 'link' and 'replay' pointers before NULL checks, potentially causing kernel crashes in AMD display code.

Why it matters to the business

May lead to system instability or denial of service on Linux systems with affected AMD graphics hardware, requiring kernel updates to prevent crashes during display operations.

How an attack unfolds

An attacker with local access could potentially trigger the vulnerable code path in the AMD display driver by manipulating display connections or replay features, leading to a kernel panic.

How to fix it

Update the Linux kernel to a version containing commit 22ae604aea14756954e1c00ae653e34d2afd2935 or later.

How to confirm the fix worked

Verify the presence of the fix commit in the kernel source or check for updated kernel packages.

Typical attack path

1. Identify system with vulnerable AMD display driver
2. Trigger edp_setup_replay function via display configuration
3. Cause NULL pointer dereference resulting in crash

How to detect it

Examine kernel logs for warnings or oops messages referencing link_edp_panel_control.c or edp_setup_replay function.

What your security team should do

• Apply kernel updates promptly for systems with AMD GPUs
• Monitor for kernel crashes related to display drivers
• Test display functionality after updates