PT-2024-34095

CVE-2024-50266

Published

2024-10-09

Updated

2025-02-28

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A recent change in the venus driver results in a stuck clock on certain devices, such as the Lenovo ThinkPad X13s, when streaming video in firefox. This issue is related to the use of HW CTRL TRIGGER for vcodec GDSCs. The problem occurs when using the out-of-tree sm8350/sc8280xp venus support.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors

Affected products

Weakness enumeration

CWE-667: Improper Locking

Related identifiers

CVE-2024-50266

BDU:2025-14144

USN-7276-1