CVE-2024-26667: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup

Published Apr 2, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: check for valid hwpp in dpuencoderhelperphyscleanup

The commit 8b45a26f2ba9 ("drm/msm/dpu: reserve cdm blocks for writeback in case of YUV output") introduced a smatch warning about another conditional block in dpuencoderhelperphyscleanup() which had assumed hwpp will always be valid which may not necessarily be true.

Lets fix the other conditional block by making sure hwpp is valid before dereferencing it.

Patchwork: https://patchwork.freedesktop.org/patch/574878/

Affected Software

7 affected componentsFixes available
Linux Linux kernel>=5.19<6.1.78
Linux Linux kernel>=6.2<6.6.17
Linux Linux kernel>=6.7<6.7.5
Linux Linux kernel=6.8-rc1
Linux Linux kernel=6.8-rc2
Linux Linux kernel=6.8-rc3
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

Event History

Apr 2, 2024
CVE Published
via MITRE·06:22 AM
Data Sourced
via MITRE·06:22 AM
Description
Jul 12, 2024
Data Sourced
via Launchpad·12:46 PM
Description
Mar 26, 2025
Data Sourced
via Ubuntu·12:07 AM
RemedyDescriptionSeverityAffected Software
Apr 23, 2025
Data Sourced
via Debian·12:13 AM
DescriptionAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-26667?

The severity of CVE-2024-26667 is classified as important.

2

How do I fix CVE-2024-26667?

To fix CVE-2024-26667, update the Linux kernel to the latest version that resolves this vulnerability.

3

Which versions of the Linux kernel are affected by CVE-2024-26667?

CVE-2024-26667 affects Linux kernel versions prior to 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, and 6.12.12-1.

4

Is there a patch available for CVE-2024-26667?

Yes, a patch is available in the updated versions of the affected Linux kernel.

5

What repositories are impacted by CVE-2024-26667?

CVE-2024-26667 impacts the Debian repository for the Linux kernel package.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203