CVE-2024-26667

MEDIUM

Linux Kernel - Info Disclosure

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup The commit 8b45a26f2ba9 ("drm/msm/dpu: reserve cdm blocks for writeback in case of YUV output") introduced a smatch warning about another conditional block in dpu_encoder_helper_phys_cleanup() which had assumed hw_pp will always be valid which may not necessarily be true. Lets fix the other conditional block by making sure hw_pp is valid before dereferencing it. Patchwork: https://patchwork.freedesktop.org/patch/574878/

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 6.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-459
Status published
Products (5)
linux/Kernel 5.19.0 - 6.1.78linux
linux/Kernel 6.2.0 - 6.6.17linux
linux/Kernel 6.7.0 - 6.7.5linux
linux/linux_kernel 6.8 rc1 (3 CPE variants)
linux/linux_kernel 5.19 - 6.1.78
Published Apr 02, 2024
Tracked Since Feb 18, 2026