CVE-2024-35932 drm/vc4: don't check if plane->state->fb == state->fb

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane-state-fb == state-fb Currently, when using non-blocking commits, we can see the following kernel warning: 110.908514 ------------ cut here ------------ 110.908529 refcountt: underflow; use-after-free...

PT-2024-26788

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.1.66-v8+ Description The vulnerability is related to the drm/vc4 driver in the Linux kernel. When using non-blocking commits, a kernel warning may occur due to a refcount t underflow, which can lead to a use-after-free...

CVE-2024-35932: Use After Free

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane-state-fb == state-fb Currently, when using non-blocking commits, we can see the following kernel warning: 110.908514 ------------ cut here ------------ 110.908529 refcountt: underflow; use-after-free...

CVE-2024-2637

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

CVE-2024-2637 Insecure Loading of Code in B&R Products

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

CVE-2024-2637 Insecure Loading of Code in B&R Products

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

PT-2024-6040

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible null pointer dereference in the vc4 hdmi audio init function. The of get address function may return NULL, which is later dereferenced. This could allo...

CVE-2021-46933 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Clear ffseventfd in ffsdataclear. ffsdataclear is indirectly called from both ffsfskillsb and ffsep0release, so it ends up being called twice when userland closes ep0 and then unmounts ffs. If userland provided ...

CVE-2023-1617

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...

CVE-2023-1617

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...

CVE-2023-1617

CVE-2023-1617 concerns the B&R VC4 visualization (VNC-Server modules) where an unauthenticated network attacker can bypass authentication. Affected are B&R VC4 versions across multiple series: 3.* (to 3.96.7), 4.0* (to 4.06.7), 4.1* (to 4.16.3), 4.2* (to 4.26.8), 4.3* (to 4.34.6), 4.4* (to 4.45.1...

CVE-2023-1617 Improper Authentication Mechanism in B&R VC4 Visualization

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...

CVE-2023-1617 Improper Authentication Mechanism in B&R VC4 Visualization

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...

CVE-2023-1617: Improper Authentication

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...

PT-2023-17122

Name of the Vulnerable Software and Affected Versions B&R VC4 versions 3. through 3.96.7 B&R VC4 versions 4.0 through 4.06.7 B&R VC4 versions 4.1 through 4.16.3 B&R VC4 versions 4.2 through 4.26.8 B&R VC4 versions 4.3 through 4.34.6 B&R VC4 versions 4.4 through 4.45.1 B&R VC4 versions 4.5 through...

SUSE CVE-2017-5576

Integer overflow in the vc4getbcl function in drivers/gpu/drm/vc4/vc4gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4SUBMITCL ioctl call...

SUSE CVE-2017-5577

The vc4getbcl function in drivers/gpu/drm/vc4/vc4gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service incorrect pointer dereference and OOPS via inconsistent size valu...

PT-2025-40162

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc6-01399-g941aae326315 Description The Linux kernel contains a flaw within the DRM/VC4 subsystem related to deadlock handling. Specifically, if vc4 hdmi reset link returns -EDEADLK, indicating a deadlock i...

PT-2023-36794

Уязвимость функции vc4 hdmi handle hotplug модуля drivers/gpu/drm/vc4/vc4 hdmi.c драйвера инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

GSD-2022-1003920 drm/vc4: txp: Don't set TXP_VSTART_AT_EOF

drm/vc4: txp: Don't set TXPVSTARTATEOF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...