PT-2024-1987 · Linux+6 · Linux Kernel+6
Tomi Valkeinen
·
Published
2024-01-16
·
Updated
2026-03-14
·
CVE-2024-26607
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge. The issue occurs due to a probing race condition in the sii902x driver. When tidss probes but is deferred as sii902x is still missing, and sii902x starts probing and enters sii902x init(), it calls drm bridge add() before setting up the i2c part, leading to a crash when sii902x bridge get edid() tries to use the i2c to read the edid.
Recommendations
To resolve the issue, move the drm bridge add() to the end of the sii902x init(), which is also at the very end of sii902x probe(). This ensures that the sii902x bridge is ready from DRM's perspective only after the i2c part has been set up, preventing the null pointer dereference crash.
Exploit
Fix
NULL Pointer Dereference
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu