PT-2024-28074 · Linux+4 · Linux Kernel+4
Douglas Anderson
·
Published
2024-06-19
·
Updated
2025-02-03
·
CVE-2024-38592
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the initialization of the
ddp comp array in the Linux kernel's drm/mediatek module. When conn routes is true, an extra slot is allocated in the array, but it is not initialized by mtk drm crtc create(). This can cause a crash when looping through the array in mtk drm crtc mode valid(). The problem is more likely to occur when the memory is poisoned, such as when booting with slub debug=FZPUA. Initializing the array with devm kcalloc() can prevent the crash, as it sets the memory to zero. This is considered a safer practice, especially when the array is small.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu