CVE-2024-38390: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
Calling a6xxdestroy() before adrenogpuinit() leads to a null pointer dereference on:
msmgpucleanup() : platformsetdrvdata(gpu->pdev, NULL);
as gpu->pdev is only assigned in:
a6xxgpuinit() | adrenogpuinit | msmgpuinit()
Instead of relying on handwavy null checks down the cleanup chain, explicitly de-allocate the LLC data and free a6xxgpu instead.
Patchwork: https://patchwork.freedesktop.org/patch/588919/
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38390?
CVE-2024-38390 has a severity rating that indicates it could lead to a null pointer dereference affecting system stability.
How do I fix CVE-2024-38390?
To mitigate CVE-2024-38390, you should update to the recommended patched versions of the Linux Kernel, such as 6.1.123-1 or newer.
Which versions of the Linux Kernel are affected by CVE-2024-38390?
CVE-2024-38390 affects Linux Kernel versions between 6.1 and 6.9, excluding the specified patched versions.
Is there a workaround for CVE-2024-38390?
There are no specific workarounds for CVE-2024-38390 other than applying the appropriate updates.
What components are vulnerable due to CVE-2024-38390?
CVE-2024-38390 primarily affects the DRM subsystem in the Linux Kernel, specifically related to the Adreno GPU during initialization.