CVE-2024-26667
MEDIUMLinux Kernel 5.19-6.1.77, 6.2-6.6.16, 6.7-6.7.4 - Incomplete Cleanup in dpu_encoder_helper_phys_cleanup
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup The commit 8b45a26f2ba9 ("drm/msm/dpu: reserve cdm blocks for writeback in case of YUV output") introduced a smatch warning about another conditional block in dpu_encoder_helper_phys_cleanup() which had assumed hw_pp will always be valid which may not necessarily be true. Lets fix the other conditional block by making sure hw_pp is valid before dereferencing it. Patchwork: https://patchwork.freedesktop.org/patch/574878/
References (4)
Core 4
Core References
Scores
CVSS v3
5.5
EPSS
0.0022
EPSS Percentile
13.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-459
Status
published
Products (15)
linux/Kernel
5.19.0 - 6.1.78linux
linux/Kernel
6.2.0 - 6.6.17linux
linux/Kernel
6.7.0 - 6.7.5linux
Linux/Linux
< 5.19
Linux/Linux
5.19
Linux/Linux
6.1.78 - 6.1.*
Linux/Linux
6.6.17 - 6.6.*
Linux/Linux
6.7.5 - 6.7.*
Linux/Linux
6.8
Linux/Linux
ae4d721ce10057a4aa9f0d253e0d460518a9ef75 - 79592a6e7bdc1d05460c95f891f5e5263a107af8
... and 5 more
Published
Apr 02, 2024
Tracked Since
Feb 18, 2026