CVE-2024-26874

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer crash has been fixed in the Linux kernel, specifically in the drm/mediatek module, related to the mtk drm crtc finish page flip function. The issue occurs when mtk crtc->event is NULL, causing a race condition between mtk drm crtc atomic flush and mtk drm finish page flip. This happens because pending needs vblank value is set by mtk crtc->event, but in mtk drm crtc atomic flush, it's not guarded by the same lock as in mtk drm finish page flip. The problem can be efficiently resolved by checking if mtk crtc->event is null before use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.