CVE-2024-38548: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-38548 is a vulnerability discovered in the Linux kernel affecting the Cadence MHDP8546 DPI/DP bridge driver. The vulnerability was disclosed on June 19, 2024, and involves a potential null pointer dereference in the cdnsmhdpatomic_enable() function (NVD).

The vulnerability occurs in the cdnsmhdpatomicenable() function where the return value of drmmodeduplicate() is assigned to mhdpstate->currentmode. A subsequent dereference of this value in drmmodesetname() can lead to a NULL pointer dereference if drmmodeduplicate() fails. The issue has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (CISA-ADP).

The vulnerability can lead to a null pointer dereference in the Linux kernel's DRM subsystem, potentially causing system crashes or denial of service conditions when the affected driver is in use (Kernel Git).

A fix has been implemented by adding a check for mhdpstate->currentmode before dereferencing it. The patch has been merged into various Linux kernel versions, including 5.15.0-121.131 for Ubuntu 22.04 LTS and 6.8.0-40.40 for Ubuntu 24.04 LTS (Ubuntu).