CVE-2024-53056

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential NULL dereference issue has been identified in the Linux kernel, specifically in the mtk crtc destroy() function. This issue arises when the mbox request channel() call fails in mtk crtc create(), resulting in the mtk crtc->cmdq client.chan pointer being set to NULL. If cmdq pkt create() is not called, then cmdq pkt destroy() should not be called to avoid a NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.