CVE-2024-50266: clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
In the Linux kernel, the following vulnerability has been resolved:
clk: qcom: videocc-sm8350: use HWCTRLTRIGGER for vcodec GDSCs
A recent change in the venus driver results in a stuck clock on the Lenovo ThinkPad X13s, for example, when streaming video in firefox:
videoccmvs0clk status stuck at 'off' WARNING: CPU: 6 PID: 2885 at drivers/clk/qcom/clk-branch.c:87 clkbranchwait+0x144/0x15c ... Call trace: clkbranchwait+0x144/0x15c clkbranch2enable+0x30/0x40 clkcoreenable+0xd8/0x29c clkenable+0x2c/0x4c vcodecclksenable.isra.0+0x94/0xd8 [venuscore] coreidpowerv4+0x464/0x628 [venuscore] vdecstartstreaming+0xc4/0x510 [venusdec] vb2startstreaming+0x6c/0x180 [videobuf2common] vb2corestreamon+0x120/0x1dc [videobuf2common] vb2streamon+0x1c/0x6c [videobuf2v4l2] v4l2m2mioctlstreamon+0x30/0x80 [v4l2mem2mem] v4lstreamon+0x24/0x30 [videodev]
using the out-of-tree sm8350/sc8280xp venus support. [1]
Update also the sm8350/sc8280xp GDSC definitions so that the hw control mode can be changed at runtime as the venus driver now requires.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50266?
CVE-2024-50266 has a medium severity rating due to the potential for a stuck clock affecting video streaming.
How do I fix CVE-2024-50266?
To fix CVE-2024-50266, update the Linux kernel to version 6.11.9 or later, or apply the relevant patches.
Which Linux kernel versions are affected by CVE-2024-50266?
CVE-2024-50266 affects Linux kernel versions from 6.11.0 to 6.12-rc6.
What is the nature of the vulnerability in CVE-2024-50266?
CVE-2024-50266 involves a malfunction in the venus driver, causing clock issues during video streaming.
Are there any specific devices impacted by CVE-2024-50266?
Lenovo ThinkPad X13s has been reported to experience issues related to CVE-2024-50266 while streaming video.