In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes In nv17_tv_get_hd_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). The same applies to drm_cvt_mode(). Add a check to avoid null pointer dereference.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/1c9f2e60150b4f13789064370e37f39e6e060f50 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/30cbf6ffafbbdd8a6e4e5f0a2e9a9827ee83f3ad cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/56fc4d3b0bdef691831cd95715a7ca3ebea98b2d cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/5eecb49a6c268dc229005bf6e8167d4001dc09a0 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/6d411c8ccc0137a612e0044489030a194ff5c843 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/6e49a157d541e7e97b815a56f4bdfcbc89844a59 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/7ece609b0ce7a7ea8acdf512a77d1fee26621637 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/ffabad4aa91e33ced3c6ae793fb37771b3e9cb51 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024072952-CVE-2024-41089-5d63@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-41089 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-41089 cve-icon
History

Mon, 03 Nov 2025 22:30:00 +0000

Type Values Removed Values Added
References

Wed, 13 Nov 2024 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Thu, 12 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Aug 2024 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T15:48:04.875Z

Updated: 2025-11-03T22:00:44.940Z

Reserved: 2024-07-12T12:17:45.634Z

Link: CVE-2024-41089

cve-icon Vulnrichment

Updated: 2024-08-02T04:46:52.333Z

cve-icon NVD

Status : Modified

Published: 2024-07-29T16:15:04.300

Modified: 2025-11-03T22:17:32.700

Link: CVE-2024-41089

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-41089 - Bugzilla