PT-2024-10003 · Linux+5 · Linux Kernel+5
Alex Deucher
+4
·
Published
2024-11-11
·
Updated
2026-05-26
·
CVE-2024-53133
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 6.11.9
Description
The issue is related to the
dc state copy internal function in the Linux kernel's drm/amd/display module. It concerns a double free vulnerability that occurs when a dml allocation fails, causing subsequent calls to dc state copy internal to shallow copy invalid memory. If the new state is released, a double free would occur, potentially allowing an attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For Linux Kernel versions prior to 6.11.9, update to a version that includes the fix for the
dml allocation failure issue, such as version 6.11.10 or later, to prevent double free crashes. As a temporary workaround, consider applying the patch from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c to reset dml pointers in new state to NULL and avoid invalid pointers.Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linux Kernel
Linuxmint
Suse
Ubuntu