CVE-2024-41089

What it actually does

Null pointer dereference in nv17_tv_get_hd_modes when drm_mode_duplicate or drm_cvt_mode returns NULL, causing kernel crash on failure path.

Why it matters to the business

Local denial of service on Linux systems using Nouveau graphics driver, leading to system instability or reboot during display mode handling; high prevalence in kernel-dependent environments increases operational disruption risk.

How an attack unfolds

Local attacker with low privileges triggers nv17_tv_get_hd_modes via graphics or display operations on affected hardware; absence of NULL checks allows dereference and kernel panic, potentially chained with other local primitives in espionage or financially motivated campaigns.

How to fix it

Apply kernel patch containing commit ffabad4aa91e33ced3c6ae793fb37771b3e9cb51 or upgrade to a stable Linux kernel version that includes the fix for drm/nouveau/dispnv04 null pointer checks.

How to confirm the fix worked

Verify presence of NULL checks after drm_mode_duplicate and drm_cvt_mode calls in nv17_tv_get_hd_modes function in source; confirm kernel version or git commit includes ffabad4aa91e33ced3c6ae793fb37771b3e9cb51.

Typical attack path

1. Obtain local user access on Linux system with Nouveau driver loaded
2. Trigger display mode enumeration or TV output configuration
3. Force drm_mode_duplicate or drm_cvt_mode to fail
4. Trigger NULL dereference leading to kernel crash

How to detect it

Search kernel logs for oops or panic messages referencing nv17_tv_get_hd_modes, drm_mode_duplicate failures, or nouveau display code; correlate with local user activity or display configuration changes.

• nv17_tv_get_hd_modes
• drm_mode_duplicate
• drm_cvt_mode
• nouveau dispnv04

What your security team should do

• Prioritize kernel upgrade to fixed version across all affected Linux deployments
• Monitor for local privilege escalation attempts that could leverage this crash
• Test graphics driver stability in staging environments before broad rollout
• Review Nouveau driver usage in production workloads for exposure reduction