CVE-2024-56775: drm/amd/display: Fix handling of plane refcount
First published: Wed Jan 08 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [Why] The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations, such as memory leaks if the refcount was supposed to go down, or double frees / invalid memory accesses if the refcount was supposed to go up. [How] Cache and re-apply current refcount when restoring plane states.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | <6.12.4 | |
| debian/linux | <=5.10.223-1<=5.10.234-1<=6.1.129-1<=6.1.128-1 | 6.12.20-1 6.12.21-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/8cb2f6793845f135b28361ba8e96901cae3e5790
- https://git.kernel.org/stable/c/27227a234c1487cb7a684615f0749c455218833a
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56775
- https://nvd.nist.gov/vuln/detail/CVE-2024-56775
- https://launchpad.net/bugs/cve/CVE-2024-56775
- https://security-tracker.debian.org/tracker/CVE-2024-56775
- https://ubuntu.com/security/CVE-2024-56775
- https://git.kernel.org/linus/27227a234c1487cb7a684615f0749c455218833a
Frequently Asked Questions
What is the severity of CVE-2024-56775?
CVE-2024-56775 has been classified as a high severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-56775?
To fix CVE-2024-56775, upgrade to the latest version of the Linux kernel that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-56775?
CVE-2024-56775 affects Linux kernel versions prior to 6.12.4.
What components are impacted by CVE-2024-56775?
CVE-2024-56775 impacts the drm/amd/display subsystem of the Linux kernel.
What are the potential consequences of CVE-2024-56775?
The potential consequences of CVE-2024-56775 include instability or crashes due to improper handling of plane reference counts.
- agent/title
- agent/first-publish-date
- agent/type
- agent/author
- agent/remedy
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/usn-cve
- source/Ubuntu
- collector/launchpad-cve
- source/Launchpad
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- vendor/linux
- canonical/linux kernel
- package-manager/debian