PT-2024-21550 · Linux+5 · Linux Kernel+5
Hsin-Yi Wang
·
Published
2024-02-23
·
Updated
2024-11-05
·
CVE-2024-26874
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null pointer crash has been fixed in the Linux kernel, specifically in the
drm/mediatek module, related to the mtk drm crtc finish page flip function. The issue occurs when mtk crtc->event is NULL, causing a race condition between mtk drm crtc atomic flush and mtk drm finish page flip. This happens because pending needs vblank value is set by mtk crtc->event, but in mtk drm crtc atomic flush, it's not guarded by the same lock as in mtk drm finish page flip. The problem can be efficiently resolved by checking if mtk crtc->event is null before use.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu