CVE-2024-26607

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge. The issue occurs due to a probing race condition in the sii902x driver. When tidss probes but is deferred as sii902x is still missing, and sii902x starts probing and enters sii902x init(), it calls drm bridge add() before setting up the i2c part, leading to a crash when sii902x bridge get edid() tries to use the i2c to read the edid.

Recommendations To resolve the issue, move the drm bridge add() to the end of the sii902x init(), which is also at the very end of sii902x probe(). This ensures that the sii902x bridge is ready from DRM's perspective only after the i2c part has been set up, preventing the null pointer dereference crash.