CVE-2024-46714 in Linux
Summary
by MITRE • 09/18/2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
Callers can pass null in filter (i.e. from returned from the function wbscl_get_filter_coeffs_16p) and a null check is added to ensure that is not the case.
This fixes 4 NULL_RETURNS issues reported by Coverity.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 04/05/2026
The vulnerability identified as CVE-2024-46714 resides within the Linux kernel's graphics subsystem, specifically within the AMD display driver component known as drm/amd/display. This issue manifests as a potential null pointer dereference condition that could lead to system instability or denial of service when processing display scaling operations. The vulnerability affects systems utilizing AMD graphics hardware through the Direct Rendering Manager framework, which manages graphics hardware access and display output. The flaw is particularly concerning as it involves the display scaling filter mechanism that is fundamental to proper graphics rendering and output management.
The technical flaw occurs in the wbscl_set_scaler_filter function where the code fails to properly validate input parameters before proceeding with operations. The vulnerability stems from the fact that callers can legitimately pass null values for the filter parameter, specifically when the function wbscl_get_filter_coeffs_16p returns a null pointer. This occurs during the retrieval of filter coefficients for display scaling operations, where the system might encounter scenarios where appropriate scaling coefficients cannot be computed or retrieved. The absence of proper null checking before attempting to use the filter parameter results in a direct dereference of a null pointer, creating a potential crash condition.
The operational impact of this vulnerability extends beyond simple system crashes, as it can affect the overall stability and reliability of graphics operations on affected systems. When the null pointer dereference occurs, it can cause the graphics driver to crash, potentially leading to complete display failures or system lockups. This is particularly problematic in server environments or embedded systems where graphics output is critical for system operation or user interface functionality. The vulnerability affects systems running Linux kernels that include the drm/amd/display driver components, with the specific issue being present in kernel versions that have not yet incorporated the fix. The null return conditions are specifically reported by Coverity static analysis tool, indicating this is a well-characterized issue that could be exploited in certain conditions.
The mitigation strategy for CVE-2024-46714 involves implementing a null check within the wbscl_set_scaler_filter function before any operations are performed on the filter parameter. This fix follows standard security practices for preventing null pointer dereferences and aligns with CWE-476, which specifically addresses null pointer dereference vulnerabilities. The solution directly addresses the root cause by ensuring that the function gracefully handles cases where filter coefficients cannot be properly retrieved or computed. System administrators should update their Linux kernels to versions that include this patch, as the fix is designed to prevent the NULL_RETURNS conditions that were flagged by Coverity. This vulnerability also relates to ATT&CK technique T1499.001, which involves system network configuration modification, as display driver issues can affect overall system stability and network operations in graphical environments. The fix ensures that the display subsystem can handle edge cases in filter coefficient retrieval without causing system-wide failures or requiring manual intervention to restore normal graphics functionality.