CVE-2024-35952

2024-05-2010:15:10

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux

kernel

vulnerability

resolved

drm/ast

soft lockup

while-loop

scratch register

mcu

dpmcu

scu-lock

link training

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm/ast: Fix soft lockup

There is a while-loop in ast_dp_set_on_off() that could lead to
infinite-loop. This is because the register, VGACRI-Dx, checked in
this API is a scratch register actually controlled by a MCU, named
DPMCU, in BMC.

These scratch registers are protected by scu-lock. If suc-lock is not
off, DPMCU can not update these registers and then host will have soft
lockup due to never updated status.

DPMCU is used to control DP and relative registers to handshake with
host’s VGA driver. Even the most time-consuming task, DP’s link
training, is less than 100ms. 200ms should be enough.