PT-2024-10003
CVE-2024-53133
·
تاريخ النشر
2024-11-11
·
تاريخ التحديث
2026-10-18
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 6.11.9
Description
The issue is related to the
dc state copy internal function in the Linux kernel's drm/amd/display module. It concerns a double free vulnerability that occurs when a dml allocation fails, causing subsequent calls to dc state copy internal to shallow copy invalid memory. If the new state is released, a double free would occur, potentially allowing an attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For Linux Kernel versions prior to 6.11.9, update to a version that includes the fix for the
dml allocation failure issue, such as version 6.11.10 or later, to prevent double free crashes. As a temporary workaround, consider applying the patch from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c to reset dml pointers in new state to NULL and avoid invalid pointers.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾