CVE-2024-43829

What it actually does

Unchecked return value from drm_cvt_mode() in the QXL DRM driver allows NULL pointer dereference leading to memory corruption.

Why it matters to the business

Potential kernel crashes causing denial of service on affected Linux systems; impacts availability across 2,700 downstream dependents with low exploitation likelihood indicated by stable EPSS.

How an attack unfolds

An attacker triggers the QXL code path where drm_cvt_mode fails, dereferencing the NULL return value to crash the kernel; referenced in Linux kernel vulnerability campaigns by espionage and financially motivated actors.

How to fix it

Apply the upstream kernel patch resolving the unchecked drm_cvt_mode return; update idna (PyPI) to version 3.7 where applicable in dependent packages.

How to confirm the fix worked

Confirm kernel source includes the added return value check for drm_cvt_mode and test graphics mode setting operations do not crash.

Typical attack path

1. Identify system using QXL graphics driver
2. Craft input that causes drm_cvt_mode to fail
3. Trigger NULL pointer dereference
4. Cause kernel panic or memory corruption

How to detect it

Search kernel logs for QXL driver NULL pointer dereference oops or drm_cvt_mode related failures; review system calls involving display mode configuration.

• drm_cvt_mode
• qxl
• NULL pointer dereference in drm

What your security team should do

• Prioritize patching Linux kernel on systems using QXL driver given 786 days since publication
• Monitor for kernel oops or NULL dereference logs in QXL paths
• Review downstream package dependencies for idna 3.7 updates