PT-2024-32216 · Linux+7 · Linux Kernel+7
Published
2024-06-10
·
Updated
2026-03-14
·
CVE-2024-46810
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.8
Description
The issue is related to a null pointer dereference in the Linux kernel, specifically in the drm/bridge component, tc358767. It occurs when the connector is not fully initialized before signalling HPD events via the
drm kms helper hotplug event() function. This may lead to a null pointer dereference. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.Recommendations
To resolve the issue, upgrade the Linux kernel to version 6.10.8 or later. As a temporary workaround, consider restricting access to the vulnerable
drm kms helper hotplug event() function until a patch is available. Avoid using the drm/bridge component, specifically the tc358767 module, in the affected Linux kernel versions until the issue is resolved.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu