CVE-2024-46720

MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use.

Affects 1 product across 1 vendor.

CVSS 3.15.5
EPSS0.2%
Percentile11th
PatchPatched
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-476: NULL Pointer Dereference

Software attempts to use a NULL pointer, causing a crash and denial of service.

◆ AI Analysis — automated analysis, not human-reviewed

A medium severity vulnerability affects Linux systems (CVE-2024-46720). No public exploit code is currently available. Review vendor advisories and apply patches during the next maintenance window.

BSID: BS-2024-GLOBAL-214573-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-46720?
A medium severity vulnerability affects Linux systems (CVE-2024-46720). No public exploit code is currently available. Review vendor advisories and apply patches during the next maintenance window.
What is the CVSS score for CVE-2024-46720?
CVE-2024-46720 has CVSS 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.2%.
Is CVE-2024-46720 actively exploited?
No confirmed active exploitation of CVE-2024-46720 as of 2026-05-30.
How do I remediate CVE-2024-46720?
Priority: LOW.
What systems are affected by CVE-2024-46720?
CVE-2024-46720 affects Linux Linux Kernel.
Vulnerability Details
CVE IDCVE-2024-46720
BSIDBS-2024-GLOBAL-214573-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published2024-09-18
Last Modified2025-11-03
ICS Relevance0%
Weakness (CWE)
NULL Pointer Dereference
SourceNVD
Official Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use. CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Linux Linux Kernel < 6.1.109 ≥ 6.2, < 6.6.50 ≥ 6.7, < 6.10.9
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 758 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashd07ecdb96d382fa4ffcddf65712e61446b79985ce9d5cc657d1593dab15a50c0fe699238b5f1e741d5d9187070a5798ef56f3bd278533b8fe8018eec4e889107
Related CVEs affecting Linux
CVE-2026-48331 10.0 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SS... CVE-2008-3496 10.0 Buffer overflow in format descriptor parsing in the uvc_parse_format function... CVE-2012-0751 10.0 The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before ... CVE-2011-2452 10.0 Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows,... CVE-2012-4163 10.0 Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows...
View all Linux CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →