CVE-2024-57926: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
drm/mediatek: Set private->alldrmprivate[i]->drm to NULL if mtkdrmbind returns err
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Configuration
In drm/mediatek, set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err, because otherwise KASAN reports a use-after-free during drm_atomic_helper_shutdown.
Linux kernel (drm/mediatek) private->all_drm_private[i]->drm = NULL
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57926?
CVE-2024-57926 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-57926?
To resolve CVE-2024-57926, upgrade to a patched version of the Linux kernel that addresses the issue.
Which versions of the Linux kernel are affected by CVE-2024-57926?
CVE-2024-57926 affects Linux kernel versions between 6.4 and 6.12.10, including several release candidates of version 6.13.
What type of vulnerability is CVE-2024-57926?
CVE-2024-57926 is a use-after-free vulnerability that could lead to a denial of service or other unintended behaviors.
Is CVE-2024-57926 exploitable remotely?
The exploitability of CVE-2024-57926 largely depends on the configuration and usage of the affected software.