CVE-2024-41089: linux NULL Pointer Dereference
Vulnerability summary
CVE-2024-41089 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 39 · Related 37Timeline
- 29-07-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes In nv17_tv_get_hd_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). The same applies to drm_cvt_mode(). Add a check to avoid null pointer dereference.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
14%
Versus all other CVEs
30-day change
0.00 pp
From 0.24% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu129 products
- linuxAll versions (No fix recorded) | < 4.4.0-261.295 | < 4.15.0-231.243 | < 5.4.0-195.215 | < 5.15.0-121.131 | < 6.8.0-48.48
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1138.144 | < 4.4.0-1176.191 | < 4.15.0-1175.188 | < 5.4.0-1132.142 | < 5.15.0-1069.75 | < 6.8.0-1018.20
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < ffabad4aa91e33ced3c6ae793fb37771b3e9cb51 | ≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < 1c9f2e60150b4f13789064370e37f39e6e060f50 | ≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < 56fc4d3b0bdef691831cd95715a7ca3ebea98b2d | ≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < 5eecb49a6c268dc229005bf6e8167d4001dc09a0 | ≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < 30cbf6ffafbbdd8a6e4e5f0a2e9a9827ee83f3ad | ≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < 7ece609b0ce7a7ea8acdf512a77d1fee26621637 | ≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < 6e49a157d541e7e97b815a56f4bdfcbc89844a59 | ≥ 6ee738610f41b59733f63718f0bdbcba7d3a3f12, < 6d411c8ccc0137a612e0044489030a194ff5c843 | 2.6.33
- linux_kernel< 4.19.317 | ≥ 4.20, < 5.4.279 | ≥ 5.5, < 5.10.221 | ≥ 5.11, < 5.15.162 | ≥ 5.16, < 6.1.97 | ≥ 6.2, < 6.6.37 | ≥ 6.7, < 6.9.8
Debian1 product
- linux< 6.1.98-1 | < 6.9.8-1
3 vendors · 132 products
