CVE-2024-38592

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the initialization of the ddp comp array in the Linux kernel's drm/mediatek module. When conn routes is true, an extra slot is allocated in the array, but it is not initialized by mtk drm crtc create(). This can cause a crash when looping through the array in mtk drm crtc mode valid(). The problem is more likely to occur when the memory is poisoned, such as when booting with slub debug=FZPUA. Initializing the array with devm kcalloc() can prevent the crash, as it sets the memory to zero. This is considered a safer practice, especially when the array is small.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.