CVE-2024-26728

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix null-pointer dereference on edid reading

Use i2c adapter when there isn't aux_mode in dc_link to fix a

null-pointer derefence that happens when running

igt@kms_force_connector_basic in a system with DCN2.1 and HDMI connector

detected as below:

[ +0.178146] BUG: kernel NULL pointer dereference, address: 00000000000004c0

[ +0.000010] #PF: supervisor read access in kernel mode

[ +0.000005] #PF: error_code(0x0000) - not-present page

[ +0.000004] PGD 0 P4D 0

[ +0.000006] Oops: 0000 [#1] PREEMPT SMP NOPTI

[ +0.000006] CPU: 15 PID: 2368 Comm: kms_force_conne Not tainted 6.5.0-asdn+ #152

[ +0.000005] Hardware name: HP HP ENVY x360 Convertible 13-ay1xxx/8929, BIOS F.01 07/14/2021

[ +0.000004] RIP: 0010:i2c_transfer+0xd/0x100

[ +0.000011] Code: ea fc ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 54 55 53 <48> 8b 47 10 48 89 fb 48 83

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References