CVE-2024-49910

What it actually does

Null pointer dereference in dcn401_set_output_transfer_func when set_output_gamma function pointer is null after an earlier null check is bypassed, leading to kernel memory corruption.

Why it matters to the business

Potential system instability, crashes, or denial of service on Linux systems using affected AMD display drivers; low exploit probability reduces immediate risk but high ecosystem prevalence of Linux kernel increases patch urgency.

How an attack unfolds

An attacker triggers the display output path in the AMD DCN401 driver where set_output_gamma is unexpectedly null, causing a kernel panic or memory corruption; listed threat actors have targeted similar Linux kernel memory issues in espionage and financially motivated campaigns.

How to fix it

Apply kernel patches that add the null check for set_output_gamma before dereference; for affected nokogiri packages update to version 1.10.3.

How to confirm the fix worked

Confirm kernel source contains the added null check around set_output_gamma call in dcn401_set_output_transfer_func; verify package version is 1.10.3 or later for nokogiri.

Typical attack path

1. Identify systems running vulnerable Linux kernel versions with AMD display hardware
2. Craft input or configuration that reaches dcn401_set_output_transfer_func
3. Force set_output_gamma to be null
4. Trigger dereference to induce null pointer dereference
5. Escalate to denial of service or attempt further corruption

How to detect it

Search kernel logs for null pointer dereference messages involving dcn401 or set_output_gamma; review for exploitation patterns noted in Linux kernel memory issue campaigns by espionage actors.

What your security team should do

• Prioritize patching Linux kernels on systems with AMD GPUs due to memory corruption family
• Monitor EPSS trend stability and absence from KEV for risk acceptance decisions
• Review logs for kernel oops or null dereference events in display driver paths