CVE-2024-26874

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26874
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip It's possible that mtk_crtc->event is NULL in mtk_drm_crtc_finish_page_flip(). pending_needs_vblank value is set by mtk_crtc->event, but in mtk_drm_crtc_atomic_flush(), it's is not guarded by the same lock in mtk_drm_finish_page_flip(), thus a race condition happens. Consider the following case: CPU1 CPU2 step 1: mtk_drm_crtc_atomic_begin() mtk_crtc->event is not null, step 1: mtk_drm_crtc_atomic_flush: mtk_drm_crtc_update_config( !!mtk_crtc->event) step 2: mtk_crtc_ddp_irq -> mtk_drm_finish_page_flip: lock mtk_crtc->event set to null, pending_needs_vblank set to false unlock pending_needs_vblank set to true, step 2: mtk_crtc_ddp_irq -> mtk_drm_finish_page_flip called again, pending_needs_vblank is still true //null pointer Instead of guarding the entire mtk_drm_crtc_atomic_flush(), it's more efficient to just check if mtk_crtc->event is null before use.

4.7 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3fc88b246a2fc16014e374040fc15af1d3752535 Patch Mailing List
https://git.kernel.org/stable/c/3fc88b246a2fc16014e374040fc15af1d3752535 Patch Mailing List
https://git.kernel.org/stable/c/4688be96d20ffa49d2186523ee84f475f316fd49 Patch Mailing List
https://git.kernel.org/stable/c/4688be96d20ffa49d2186523ee84f475f316fd49 Patch Mailing List
https://git.kernel.org/stable/c/9acee29a38b4d4b70f1f583e5ef9a245db4db710 Patch Mailing List
https://git.kernel.org/stable/c/9acee29a38b4d4b70f1f583e5ef9a245db4db710 Patch Mailing List
https://git.kernel.org/stable/c/9beec711a17245b853d64488fd5b739031612340 Patch Mailing List
https://git.kernel.org/stable/c/9beec711a17245b853d64488fd5b739031612340 Patch Mailing List
https://git.kernel.org/stable/c/a3dd12b64ae8373a41a216a0b621df224210860a Patch Mailing List
https://git.kernel.org/stable/c/a3dd12b64ae8373a41a216a0b621df224210860a Patch Mailing List
https://git.kernel.org/stable/c/accdac6b71d5a2b84040c3d2234f53a60edc398e Patch Mailing List
https://git.kernel.org/stable/c/accdac6b71d5a2b84040c3d2234f53a60edc398e Patch Mailing List
https://git.kernel.org/stable/c/c958e86e9cc1b48cac004a6e245154dfba8e163b Patch Mailing List
https://git.kernel.org/stable/c/c958e86e9cc1b48cac004a6e245154dfba8e163b Patch Mailing List
https://git.kernel.org/stable/c/d2bd30c710475b2e29288827d2c91f9e6e2b91d7 Patch Mailing List
https://git.kernel.org/stable/c/d2bd30c710475b2e29288827d2c91f9e6e2b91d7 Patch Mailing List
https://git.kernel.org/stable/c/dfde84cc6c589f2a9f820f12426d97365670b731 Patch Mailing List
https://git.kernel.org/stable/c/dfde84cc6c589f2a9f820f12426d97365670b731 Patch Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

03 Mar 2025, 17:47

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Mailing List
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List
References () https://git.kernel.org/stable/c/dfde84cc6c589f2a9f820f12426d97365670b731 - () https://git.kernel.org/stable/c/dfde84cc6c589f2a9f820f12426d97365670b731 - Patch, Mailing List
References () https://git.kernel.org/stable/c/d2bd30c710475b2e29288827d2c91f9e6e2b91d7 - () https://git.kernel.org/stable/c/d2bd30c710475b2e29288827d2c91f9e6e2b91d7 - Patch, Mailing List
References () https://git.kernel.org/stable/c/a3dd12b64ae8373a41a216a0b621df224210860a - () https://git.kernel.org/stable/c/a3dd12b64ae8373a41a216a0b621df224210860a - Patch, Mailing List
References () https://git.kernel.org/stable/c/accdac6b71d5a2b84040c3d2234f53a60edc398e - () https://git.kernel.org/stable/c/accdac6b71d5a2b84040c3d2234f53a60edc398e - Patch, Mailing List
References () https://git.kernel.org/stable/c/9beec711a17245b853d64488fd5b739031612340 - () https://git.kernel.org/stable/c/9beec711a17245b853d64488fd5b739031612340 - Patch, Mailing List
References () https://git.kernel.org/stable/c/3fc88b246a2fc16014e374040fc15af1d3752535 - () https://git.kernel.org/stable/c/3fc88b246a2fc16014e374040fc15af1d3752535 - Patch, Mailing List
References () https://git.kernel.org/stable/c/c958e86e9cc1b48cac004a6e245154dfba8e163b - () https://git.kernel.org/stable/c/c958e86e9cc1b48cac004a6e245154dfba8e163b - Patch, Mailing List
References () https://git.kernel.org/stable/c/9acee29a38b4d4b70f1f583e5ef9a245db4db710 - () https://git.kernel.org/stable/c/9acee29a38b4d4b70f1f583e5ef9a245db4db710 - Patch, Mailing List
References () https://git.kernel.org/stable/c/4688be96d20ffa49d2186523ee84f475f316fd49 - () https://git.kernel.org/stable/c/4688be96d20ffa49d2186523ee84f475f316fd49 - Patch, Mailing List
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
First Time Debian debian Linux
Debian
Linux linux Kernel
Linux

05 Nov 2024, 10:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'name': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'tags': [], 'refsource': ''}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'name': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'tags': [], 'refsource': ''}

27 Jun 2024, 13:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

17 Apr 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-17 11:15

Updated : 2025-03-03 17:47

NVD link : CVE-2024-26874

Mitre link : CVE-2024-26874

JSON object : View

Products Affected

linux

  • linux_kernel

debian

  • debian_linux
CWE

No CWE.