Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-49892

17
FAUCET Score

CVE-2024-49892 is a Linux kernel vulnerability affecting the AMD display driver, specifically within the 'drm/amd/display' component. It involves a divide-by-zero error (CWE-369) due to uninitialized variables in the 'get_bytes_per_element' function. Rated Medium (CVSS 5.5), this local vulnerability requires low privileges and complexity, leading to high availability impact (system crash) but no confidentiality or integrity loss. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 5.10.227CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.168CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.113CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.55CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.10.14CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.26%
Probability of exploitation in next 30 days
EPSS Percentile
17.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0026 is in the 71st percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (19)

9001patch availablevia llm_extracted
View patch
codesyspatch availablevia llm_extracted
View patch
esphomepatch availablevia llm_extracted
View patch
gatsbyjspatch availablevia llm_extracted
View patch
joinmastodonpatch availablevia llm_extracted
View patch
mariadbpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 17610-17084Fixed in: 6.6.57.1-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.57.1-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.57.1-2
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.57.1-2 on Azure Linux 3.0Fixed in: 6.6.57.1-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.51.1-5 on Azure Linux 3.0Fixed in: 6.6.57.1-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: 17123-16823Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: 17156-17086Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: 19672-17086Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: 17575-17084Fixed in: 6.6.57.1-2

Vendor Advisories (10)

codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
mariadbllm-mariadb-7e20cc2309665f3eCRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
gatsbyjsllm-gatsbyjs-d2a2db116f1afcf5CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
9001llm-9001-fecf0327d92708b9CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
joinmastodonllm-joinmastodon-9b2d3b3c900c6299CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
microsoft2024-Dec/CVE-2024-49892

CVE-2024-49892

Dec 10, 2024
microsoft2024-Nov/CVE-2024-49892

CVE-2024-49892

Nov 12, 2024
redhatCVE-2024-49892Moderate

kernel: drm/amd/display: Initialize get_bytes_per_element&#39;s default to 1

Oct 21, 2024
microsoft2024-Oct/CVE-2024-49892Moderate

drm/amd/display: Initialize get_bytes_per_element's default to 1

Oct 8, 2024

References

cert-portal.siemens.com / productcert/html/ssa-265688.html
cert-portal.siemens.com / productcert/html/ssa-355557.html
git.kernel.org / stable/c/1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76
Patch
git.kernel.org / stable/c/3334ab72cbba55a632f24579cd47c4a4e5e69cda
Patch
git.kernel.org / stable/c/4067f4fa0423a89fb19a30b57231b384d77d2610
Patch
git.kernel.org / stable/c/8f0abb39c16e719129de10596b3ae3363fa178b4
git.kernel.org / stable/c/a23d6029e730f8a151b1a34afb169baac1274583
Patch
git.kernel.org / stable/c/bc00d211da4ffad5314a2043b50bdc8ff8a33724
Patch
git.kernel.org / stable/c/c7630935d9a4986e8c0ed91658a781b7a77d73f7
Patch
git.kernel.org / stable/c/f921335123f6620c3dce5c96fbb95f18524a021c
Patch
lists.debian.org / debian-lts-announce/2025/01/msg00001.html
lists.debian.org / debian-lts-announce/2025/03/msg00002.html