CVE-2024-26909 soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglinkaltmode: fix drm bridge use-after-free A recent DRM series purporting to simplify support for "transparent bridges" and handling of probe deferrals ironically exposed a use-after-free issue on pmicglinkaltmode...

CVE-2024-26909

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglinkaltmode: fix drm bridge use-after-free A recent DRM series purporting to simplify support for "transparent bridges" and handling of probe deferrals ironically exposed a use-after-free issue on pmicglinkaltmode...

CVE-2024-26876

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: adv7511: fix crash on irq during probe Moved IRQ registration down to end of adv7511probe. If an IRQ already is pending during adv7511probe before adv7511cecinit then cecreceivedmsgts could crash using uninitialized...

CVE-2024-26876: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: adv7511: fix crash on irq during probe Moved IRQ registration down to end of adv7511probe. If an IRQ already is pending during adv7511probe before adv7511cecinit then cecreceivedmsgts could crash using uninitialized...

Unbreakable Enterprise kernel security update

4.14.35-2047.535.2.1 - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36467681 CVE-2024-1086 4.14.35-2047.535.2 - Fix null ptr in rdstcprecvpath Allison Henderson Orabug: 33499812 - LTS version: v4.14.338 Saeed Mirzamohammadi - crypto: scompress - initialize...

DEBIAN-CVE-2021-47063

In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drmconnectorcleanup manually in panelbridgedetach, the connector will be cleaned up with the other DRM objects in the call to drmmodeconfigcleanup. However,...

AZL-55250 CVE-2024-26607 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: sii902x: Fix probing race issue A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge: 53.271356 sii902xgetedid+0x34/0x70 sii902x 53.276066 sii902xbridgegetedid+0x14/0x20 sii90...

CVE-2024-26607

The CVE-2024-26607 issue affects the Linux kernel sii902x bridge driver on TI platforms. Root cause: a probing race where drm_bridge_add() is invoked before the driver fully initializes the i2c EDID path, leading to a NULL pointer dereference in sii902x_bridge_get_edid during EDID reads. Impact: ...

CVE-2021-47063: Use After Free

In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drmconnectorcleanup manually in panelbridgedetach, the connector will be cleaned up with the other DRM objects in the call to drmmodeconfigcleanup. However,...

CVE-2024-26607: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: sii902x: Fix probing race issue A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge: 53.271356 sii902xgetedid+0x34/0x70 sii902x 53.276066 sii902xbridgegetedid+0x14/0x20 sii90...

PT-2024-8180

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's drm/bridge component, specifically the tpd12s015 driver. The problem arises when the tpd12s015 remove function is marked with exit, causing i...

kernel: drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

A NULL pointer dereference was found in the IT6505 DisplayPort bridge driver. If an HPD interrupt fires before the DRM bridge registration completes, the driver attempts to access an uninitialized AUX channel, causing a kernel crash...

PT-2023-8795 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the drm bridge get edid function of the Linux kernel's meson component. This leak occurs on the -hpd notify callback. The EDID returned by drm...

PT-2023-9387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the Linux kernel's drm/bridge/ite-it66121.c component. This occurs when no monitor is connected and the sound card is opened from...

PT-2022-35096 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the drm: bridge: adv7511, where the CEC I2C device is not unregistered after the CEC adapter is removed. This is an automated ID intended to aid in discovery of...

GSD-2022-1001737 drm/bridge: Add missing pm_runtime_put_sync

drm/bridge: Add missing pmruntimeputsync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001409 drm/bridge: Add missing pm_runtime_put_sync

drm/bridge: Add missing pmruntimeputsync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001072 drm/bridge: Add missing pm_runtime_put_sync

drm/bridge: Add missing pmruntimeputsync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-30010

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.32 Description The issue is related to an overflow problem when reading EDID in the drm/bridge component, specifically affecting the anx7625 module. The actual impact and potential for attack have not...