CVE-2024-46714

What it actually does

Missing null check on filter parameter passed to wbscl_set_scaler_filter allows null pointer dereference when wbscl_get_filter_coeffs_16p returns null, leading to kernel crash or undefined behavior in AMD display scaling code path.

Why it matters to the business

Graphics subsystem instability or crashes on affected Linux systems can interrupt user sessions and workloads; low exploitability and no known in-the-wild use reduce immediate operational risk despite kernel exposure.

How an attack unfolds

An attacker with local access crafts display or scaling operations that invoke the affected AMD display code path, causing wbscl_get_filter_coeffs_16p to return null; without the added check the null is dereferenced inside wbscl_set_scaler_filter, triggering a kernel fault.

How to fix it

Update the Linux kernel to commit 0364f1f17a86d89dc39040beea4f099e60189f1b or later stable releases that contain the null check; apply distribution-specific kernel packages that backport the fix.

How to confirm the fix worked

Confirm kernel source contains the null check before calling wbscl_set_scaler_filter; verify running kernel version matches or exceeds the fixed commit hash for the distribution in use.

Typical attack path

1. Obtain local code execution or user session on affected Linux kernel
2. Trigger display or scaler configuration that reaches wbscl_get_filter_coeffs_16p returning null
3. Invoke wbscl_set_scaler_filter with the null filter value
4. Trigger kernel null dereference resulting in crash or denial of service

How to detect it

Review kernel crash logs and oops reports for null pointer dereferences originating from amd/display or wbscl_set_scaler_filter; correlate with process activity that modifies display scaler settings.

What your security team should do

• Prioritize kernel updates on systems using AMD display hardware within the next maintenance window
• Monitor EPSS and threat actor reports for any change in exploitation activity
• Test updated kernels in staging environments before broad deployment to avoid regression in display functionality