CVE-2024-26876: drm/bridge: adv7511: fix crash on irq during probe
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: adv7511: fix crash on irq during probe
Moved IRQ registration down to end of adv7511probe().
If an IRQ already is pending during adv7511probe (before adv7511cecinit) then cecreceivedmsgts could crash using uninitialized data:
Unable to handle kernel read from unreadable memory at virtual address 00000000000003d5 Internal error: Oops: 96000004 [#1] PREEMPTRT SMP Call trace: cecreceivedmsgts+0x48/0x990 [cec] adv7511cecirqprocess+0x1cc/0x308 [adv7511] adv7511irqprocess+0xd8/0x120 [adv7511] adv7511irqhandler+0x1c/0x30 [adv7511] irqthreadfn+0x30/0xa0 irqthread+0x14c/0x238 kthread+0x190/0x1a8
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26876?
CVE-2024-26876 has a moderate severity level due to the potential for a crash during IRQ handling.
How do I fix CVE-2024-26876?
To resolve CVE-2024-26876, you should update your Linux kernel to versions 6.12.11-1 or 6.12.12-1 or higher.
Which software versions are affected by CVE-2024-26876?
CVE-2024-26876 affects Debian Linux versions from 5.10.223-1 to 5.10.226-1 and 6.1.119-1 to 6.1.123-1.
What components are involved in CVE-2024-26876?
The vulnerability involves the Linux DRM bridge driver for the Adv7511 component.
Is this vulnerability specific to any particular Linux distribution?
Yes, CVE-2024-26876 is specifically noted in the Debian Linux kernel.