PT-2024-21552 · Linux+4 · Linux Kernel+4
Mads Bligaard Nielsen
·
Published
2024-04-17
·
Updated
2026-05-26
·
CVE-2024-26876
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a crash that occurs when an IRQ is pending during the probe of the adv7511 driver in the Linux kernel. Specifically, if an IRQ is already pending during the
adv7511 probe() function, before the adv7511 cec init() function is called, then the cec received msg ts() function could crash using uninitialized data. This results in an internal error, with the kernel unable to handle a read from unreadable memory at a specific virtual address, leading to a call trace that includes functions such as cec received msg ts(), adv7511 cec irq process(), adv7511 irq process(), adv7511 irq handler(), irq thread fn(), irq thread(), and kthread().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu