Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ryan Seto

Researcher fromAMD
#31940of 53,624
7.8Total CVSS
Vulnerabilities · 1
PT-2024-10003
7.8
2024-11-11
Linux · Linux Kernel · CVE-2024-53133
**Name of the Vulnerable Software and Affected Versions** Linux Kernel versions prior to 6.11.9 **Description** The issue is related to the `dc state copy internal` function in the Linux kernel's `drm/amd/display` module. It concerns a double free vulnerability that occurs when a `dml` allocation fails, causing subsequent calls to `dc state copy internal` to shallow copy invalid memory. If the new state is released, a double free would occur, potentially allowing an attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** For Linux Kernel versions prior to 6.11.9, update to a version that includes the fix for the `dml` allocation failure issue, such as version 6.11.10 or later, to prevent double free crashes. As a temporary workaround, consider applying the patch from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c to reset `dml` pointers in `new state` to NULL and avoid invalid pointers.