Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-35952
HistoryMay 20, 2024 - 12:00 a.m.

CVE-2024-35952

2024-05-2000:00:00
ubuntu.com
ubuntu.com
2
linux kernel
vulnerability fix
drm/ast
soft lockup
while-loop
ast_dp_set_on_off
infinite-loop
register
vgacri-dx
scratch register
mcu
dpmcu

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved:
drm/ast: Fix soft lockup There is a while-loop in ast_dp_set_on_off() that
could lead to infinite-loop. This is because the register, VGACRI-Dx,
checked in this API is a scratch register actually controlled by a MCU,
named DPMCU, in BMC. These scratch registers are protected by scu-lock. If
suc-lock is not off, DPMCU can not update these registers and then host
will have soft lockup due to never updated status. DPMCU is used to control
DP and relative registers to handshake with host’s VGA driver. Even the
most time-consuming task, DP’s link training, is less than 100ms. 200ms
should be enough.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

Related for UB:CVE-2024-35952