Linux · Linux Kernel · CVE-2024-50003
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A flaw in the Linux kernel has been identified, causing the system to hang when resuming with a Thunderbolt (TBT) monitor. This issue occurs because the TBT monitor HPD is triggered during the resume procedure, calling the `drm client modeset probe()` function while `struct drm connector connector->dev->master` is NULL, which messes up the pipe topology after resume.
Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider skipping the TBT monitor HPD during the resume procedure. Restrict access to the `drm client modeset probe()` function to minimize the risk of exploitation until the issue is resolved.