CVE-2024-26667

MEDIUM

Linux Kernel 5.19-6.1.77, 6.2-6.6.16, 6.7-6.7.4 - Incomplete Cleanup in dpu_encoder_helper_phys_cleanup

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup The commit 8b45a26f2ba9 ("drm/msm/dpu: reserve cdm blocks for writeback in case of YUV output") introduced a smatch warning about another conditional block in dpu_encoder_helper_phys_cleanup() which had assumed hw_pp will always be valid which may not necessarily be true. Lets fix the other conditional block by making sure hw_pp is valid before dereferencing it. Patchwork: https://patchwork.freedesktop.org/patch/574878/

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 13.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-459
Status published
Products (15)
linux/Kernel 5.19.0 - 6.1.78linux
linux/Kernel 6.2.0 - 6.6.17linux
linux/Kernel 6.7.0 - 6.7.5linux
Linux/Linux < 5.19
Linux/Linux 5.19
Linux/Linux 6.1.78 - 6.1.*
Linux/Linux 6.6.17 - 6.6.*
Linux/Linux 6.7.5 - 6.7.*
Linux/Linux 6.8
Linux/Linux ae4d721ce10057a4aa9f0d253e0d460518a9ef75 - 79592a6e7bdc1d05460c95f891f5e5263a107af8
... and 5 more
Published Apr 02, 2024
Tracked Since Feb 18, 2026