CVE-2024-40926: drm/nouveau: don't attempt to schedule hpd_work on headless cards
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: don't attempt to schedule hpdwork on headless cards
If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume.
Fix it by adding headless flag to DRM and skip any hpd if it's set.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40926?
CVE-2024-40926 is considered a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-40926?
To fix CVE-2024-40926, users should upgrade to the recommended versions of the Linux package, specifically 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
What changes were made to address CVE-2024-40926?
The fix for CVE-2024-40926 ensures that hpd_work and hpd_lock are not left uninitialized on headless cards in the Linux kernel.
Which Linux kernel versions are affected by CVE-2024-40926?
CVE-2024-40926 affects various versions of the Linux kernel prior to the addresses in the resolution.
Who is affected by CVE-2024-40926?
Users running the affected versions of the Linux kernel, particularly on systems with headless graphics cards, are at risk from CVE-2024-40926.