CVE-2024-46727

What it actually does

Missing NULL check on otg_master pointer within resource_log_pipe_topology_update allows potential null pointer dereference in the AMD display driver code path.

Why it matters to the business

May lead to kernel instability or denial of service on Linux systems using AMD graphics hardware, disrupting workloads that depend on display output.

How an attack unfolds

An attacker with local access triggers display topology updates that pass a null otg_master value into the function, resulting in a crash or memory corruption.

How to fix it

Update the Linux kernel to include commit aad4d3d3d3b6a362bf5db11e1f28c4a60620900d or equivalent fixed versions across affected stable branches.

How to confirm the fix worked

Inspect the patched source for the added otg_master NULL check; re-run static analysis tools and confirm absence of the prior warning.

Typical attack path

1. Obtain local system access
2. Configure or manipulate AMD display pipes to invoke resource_log_pipe_topology_update
3. Force otg_master to be null during the call

How to detect it

Review kernel logs and crash dumps for entries referencing amd display or resource_log_pipe_topology_update around the time of unexpected reboots or panics.

What your security team should do

• Apply the kernel fix to all AMD-equipped systems as soon as possible
• Prioritize updates on production hosts handling graphics workloads
• Monitor kernel changelogs for related display driver patches