CVE-2024-57926

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description A use-after-free vulnerability has been resolved in the Linux kernel. The issue occurs in the drm/mediatek module when mtk drm bind returns an error, and the private->all drm private[i]->drm pointer is not set to NULL. This causes the drm atomic helper shutdown function to access previously allocated memory, resulting in a use-after-free error. The vulnerability is detected by KASAN (Kernel Address Sanitizer).

Recommendations To resolve the issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the drm atomic helper shutdown function until a patch is available. However, this may have unintended consequences and should be used with caution. At the moment, there is no information about other workarounds or mitigation measures.