CVE-2024-50214: drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic()
In the Linux kernel, the following vulnerability has been resolved:
drm/connector: hdmi: Fix memory leak in drmdisplaymodefromceavic()
modprobe drmconnectortest and then rmmod drmconnectortest, the following memory leak occurs.
The mode allocated in drmmodeduplicate() called by drmdisplaymodefromceavic() is not freed, which cause the memory leak:
unreferenced object 0xffffff80cb0ee400 (size 128): comm "kunittrycatch", pid 1948, jiffies 4294950339 hex dump (first 32 bytes): 14 44 02 00 80 07 d8 07 04 08 98 08 00 00 38 04 .D............8. 3c 04 41 04 65 04 00 00 05 00 00 00 00 00 00 00 <.A.e........... backtrace (crc 90e9585c): [<00000000ec42e3d7>] kmemleakalloc+0x34/0x40 [<00000000d0ef055a>] kmalloccachenoprof+0x26c/0x2f4 [<00000000c2062161>] drmmodeduplicate+0x44/0x19c [<00000000f96c74aa>] drmdisplaymodefromceavic+0x88/0x98 [<00000000d8f2c8b4>] 0xffffffdc982a4868 [<000000005d164dbc>] kunittryruncase+0x13c/0x3ac [<000000006fb23398>] kunitgenericrunthreadfnadapter+0x80/0xec [<000000006ea56ca0>] kthread+0x2e8/0x374 [<000000000676063f>] retfromfork+0x10/0x20 ......
Free mode by using drmkunitdisplaymodefromceavic() to fix it.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50214?
CVE-2024-50214 has been classified with a severity rating that indicates it could lead to a significant memory leak in the Linux kernel.
How do I fix CVE-2024-50214?
To fix CVE-2024-50214, upgrade to a patched version of the Linux kernel that addresses this specific vulnerability.
What versions of the Linux kernel are affected by CVE-2024-50214?
CVE-2024-50214 affects Linux kernel versions from 6.11 to 6.12-rc5.
Is there a workaround for CVE-2024-50214?
Currently, there are no recommended workarounds for CVE-2024-50214 besides updating to a fixed version of the kernel.
What components are involved in the CVE-2024-50214 vulnerability?
CVE-2024-50214 involves the DRM (Direct Rendering Manager) components of the Linux kernel related to HDMI connectivity.