CVE-2024-41095

What it actually does

Null pointer dereference in nv17_tv_get_ld_modes() when drm_mode_duplicate() returns NULL without a subsequent check, causing a kernel crash in the Nouveau display driver.

Why it matters to the business

Local denial of service on Linux systems using affected Nouveau drivers, disrupting operations on servers, desktops, and embedded devices; widespread Linux kernel prevalence amplifies exposure across many environments.

How an attack unfolds

An attacker with local access invokes the vulnerable display mode retrieval path in the Nouveau driver; drm_mode_duplicate() fails and returns NULL, which is then dereferenced, triggering a kernel panic. Threat actors in espionage and financially motivated campaigns have targeted similar Linux kernel issues.

How to fix it

Update the Linux kernel to include commit 9289cd3450d1da3e271ef4b054d4d2932c41243e or later; apply the patch that adds an explicit NULL check after drm_mode_duplicate().

How to confirm the fix worked

Inspect kernel source for the added NULL check after drm_mode_duplicate() in nv17_tv_get_ld_modes() or verify the running kernel contains the referenced commit.

Typical attack path

1. Obtain local user access on a target Linux system
2. Trigger Nouveau display mode handling via graphics or display configuration
3. Force drm_mode_duplicate() failure to produce NULL pointer dereference and kernel crash

How to detect it

Review system and kernel logs for oops or panic entries referencing nv17_tv_get_ld_modes or drm_mode_duplicate failures.

What your security team should do

• Apply the referenced kernel commit or patched distribution update with highest priority
• Monitor kernel logs for Nouveau-related oops and panics
• Limit local access and unprivileged graphics operations until patched