CVE-2024-46810
drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
27 Sep 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
Make sure the connector is fully initialized before signalling any
HPD events via drm_kms_helper_hotplug_event(), otherwise this may
lead to NULL pointer dereference.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/162e48cb1d84c2c966b649b8ac5c9d4f75f6d44fhttps://git.kernel.org/stable/c/1fb13693953737783b424aa4712f0a27a9eaf5a8https://git.kernel.org/stable/c/9d567126474e68f959b2c2543c375f3bb32e948ahttps://git.kernel.org/stable/c/adc5674c23b8191e596ed0dbaa9600265ac896a8https://git.kernel.org/stable/c/e1b121f21bbc56a6ae035aa5b77daac62bfb9be5https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html