CVE-2024-57799: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM
In the Linux kernel, the following vulnerability has been resolved:
phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM
In some cases, rkhdptxphyruntimeresume() may be invoked before platformsetdrvdata() is executed in ->probe(), leading to a NULL pointer dereference when using the return of devgetdrvdata().
Ensure platformsetdrvdata() is called before devmpmruntimeenable().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57799?
CVE-2024-57799 has a medium severity due to potential NULL pointer dereference which can lead to system instability.
How do I fix CVE-2024-57799?
To fix CVE-2024-57799, update the Linux kernel to a version later than 6.12.8 or apply the relevant patches.
Which versions of Linux Kernel are affected by CVE-2024-57799?
CVE-2024-57799 affects Linux Kernel versions from 6.9 to 6.12.8, including specific release candidates 6.13-rc1 to 6.13-rc4.
What causes the vulnerability CVE-2024-57799?
CVE-2024-57799 is caused by the invocation of rk_hdptx_phy_runtime_resume() before platform_set_drvdata() in the driver probe sequence.
Is CVE-2024-57799 being actively exploited?
As of now, there are no reports indicating that CVE-2024-57799 is actively exploited in the wild.