Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-53056

drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() In mtk_crtc_create(), if the call to mbox_request_channel() fails then we set the "mtk_crtc->cmdq_client.chan" pointer to NULL. In that situation, we do not call cmdq_pkt_create(). During the cleanup, we need to check if the "mtk_crtc->cmdq_client.chan" is NULL first before calling cmdq_pkt_destroy(). Calling cmdq_pkt_destroy() is unnecessary if we didn't call cmdq_pkt_create() and it will result in a NULL pointer dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to < 32ac6dccf561af97f20a3831430577d8a978e672affected
  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to < fb05e973698f4af008c7fb6e0cfa6a2fa1d98409affected
  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to < c60583a87cb4a85b69d1f448f0be5eb6ec62cbb2affected
  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to < 4018651ba5c409034149f297d3dd3328b91561fdaffected
  • 2c4396693698e876e559768d3d3a150c672ec384affected
  • 5.15.54 to < 5.16affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.11.7 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References