PT-2024-26744 · Linux+4 · Linux Kernel+4

Published 2024-03-27 · Updated 2026-05-26 · CVE-2024-35799

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when disabling the stream encoder in the Linux kernel's drm/amd/display module, which invokes a function that no longer exists. This can cause a crash. The problem occurs because the function declaration is not checked for NULL before being invoked in the disable stream encoder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-248

CWE-400

Related Identifiers

AZL-67584

BDU:2025-04475

CVE-2024-35799

ECHO-92CB-94FD-6096

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2190-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20249-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

Affected Products

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 3576

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35799.json · Exploit
• https://ubuntu.com/security/CVE-2024-26816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26870 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27058 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27388 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35844 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26942 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26869 · Vendor Advisory
• https://git.kernel.org/stable/c/59772327d439874095516673b4b30c48bd83ca38 · Patch
• https://ubuntu.com/security/CVE-2024-35789 · Vendor Advisory
• https://git.kernel.org/stable/c/2b17133a0a2e0e111803124dad09e803718d4a48 · Patch
• https://ubuntu.com/security/CVE-2024-27042 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26880 · Vendor Advisory