CVE-2024-43894

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a null pointer dereference in the drm client modeset probe() function. Specifically, the return value of drm mode duplicate() is assigned to modeset->mode, which can lead to a null pointer dereference if drm mode duplicate() fails. A check has been added to avoid this issue.

Recommendations To resolve the issue, update to Linux kernel version 6.6.50 or later. As a temporary workaround, consider disabling the drm client modeset probe() function until a patch is available.