CVE-2024-35932: drm/vc4: don't check if plane->state->fb == state->fb
drm/vc4: don't check if plane->state->fb == state->fb
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernel drm/vc4to a version that resolves this vulnerability.Patch drm/vc4: don't check if plane->state->fb == state->fb - Compensating control
If you have a drm/vc4 change that performs the check `plane->state->fb == state->fb`, avoid directly accessing `struct drm_plane .state` and use the `drm_atomic_get_new_plane_state()` helper instead to prevent the non-blocking commits refcount underflow/use-after-free warning.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35932?
CVE-2024-35932 has been classified with a moderate severity level due to potential kernel warnings affecting system stability.
How do I fix CVE-2024-35932?
To fix CVE-2024-35932, update to the patched kernel versions 6.1.123-1, 6.1.128-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2024-35932?
CVE-2024-35932 affects Linux kernel versions up to 5.10.226-1.
What component of the Linux kernel is impacted by CVE-2024-35932?
CVE-2024-35932 impacts the DRM (Direct Rendering Manager) VC4 driver in the Linux kernel.
Is CVE-2024-35932 related to security vulnerabilities?
CVE-2024-35932 is not classified as a security vulnerability but rather an issue that may cause warnings in the kernel.