CVE-2024-50201: drm/radeon: Fix encoder->possible_clones
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix encoder->possibleclones
Include the encoder itself in its possibleclones bitmask. In the past nothing validated that drivers were populating possibleclones correctly, but that changed in commit 74d2aacbe840 ("drm: Validate encoder->possibleclones"). Looks like radeon never got the memo and is still not following the rules 100% correctly.
This results in some warnings during driver initialization: Bogus possibleclones: [ENCODER:46:TV-46] possibleclones=0x4 (full encoder mask=0x7) WARNING: CPU: 0 PID: 170 at drivers/gpu/drm/drmmodeconfig.c:615 drmmodeconfigvalidate+0x113/0x39c ...
(cherry picked from commit 3b6e7d40649c0d75572039aff9d0911864c689db)
Other sources
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix encoder->possibleclones
Include the encoder itself in its possibleclones bitmask. In the past nothing validated that drivers were populating possibleclones correctly, but that changed in commit 74d2aacbe840 ("drm: Validate encoder->possibleclones"). Looks like radeon never got the memo and is still not following the rules 100% correctly.
This results in some warnings during driver initialization: Bogus possibleclones: [ENCODER:46:TV-46] possibleclones=0x4 (full encoder mask=0x7) WARNING: CPU: 0 PID: 170 at drivers/gpu/drm/drmmodeconfig.c:615 drmmodeconfigvalidate+0x113/0x39c ...
(cherry picked from commit 3b6e7d40649c0d75572039aff9d0911864c689db)
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50201?
CVE-2024-50201 is considered to be of moderate severity due to its impact on the Linux kernel's handling of encoder configurations.
How do I fix CVE-2024-50201?
To fix CVE-2024-50201, update your Linux kernel to a version that addresses this vulnerability, specifically above the patched version.
What versions of Linux kernel are affected by CVE-2024-50201?
CVE-2024-50201 affects Linux kernel versions between 5.8 and 6.12-rc3.
Is CVE-2024-50201 exploitable?
CVE-2024-50201 could potentially be exploited in scenarios where incorrect encoder configurations might lead to security issues.
What impact does CVE-2024-50201 have on system performance?
CVE-2024-50201 primarily impacts the correctness of device driver interactions rather than system performance.