CVE-2024-46698

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when a PCI device with a non-VGA class is the boot display, and sysfb disable() is not called for this device. However, when a non-primary GPU with a VGA class calls sysfb disable(), it results in a NULL pointer dereference because the resources have already been freed by aperture detach platform device(). This is fixed by passing a device pointer to sysfb disable() and checking the device to determine if the function should be executed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.