PT-2025-3651 · Linux+4 · Linux Kernel+4
Published
2024-12-25
·
Updated
2025-10-03
·
CVE-2024-57926
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A use-after-free vulnerability has been resolved in the Linux kernel. The issue occurs in the
drm/mediatek module when mtk drm bind returns an error, and the private->all drm private[i]->drm pointer is not set to NULL. This causes the drm atomic helper shutdown function to access previously allocated memory, resulting in a use-after-free error. The vulnerability is detected by KASAN (Kernel Address Sanitizer).Recommendations
To resolve the issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the
drm atomic helper shutdown function until a patch is available. However, this may have unintended consequences and should be used with caution. At the moment, there is no information about other workarounds or mitigation measures.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Suse
Ubuntu