CVE-2024-22386 Race condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable

2024-02-0507:21:20

CWE-362

Anolis

github.com

linux

kernel

drm

exynos

race condition

vulnerability

null pointer

denial of service

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

A race condition was found in the Linux kernel’s drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CNA Affected

[
  {
    "repo": "https://gitee.com/anolis/cloud-kernel.git",
    "vendor": "Linux",
    "modules": [
      "drm",
      "exynos"
    ],
    "product": "Linux kernel",
    "versions": [
      {
        "status": "affected",
        "version": "v4.11-rc1",
        "lessThan": "v6.6-rc1",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Linux",
      "x86",
      "ARM"
    ],
    "packageName": "kernel",
    "programFiles": [
      "https://gitee.com/anolis/cloud-kernel/blob/devel-5.10/drivers/gpu/drm/exynos/exynos_drm_crtc.c"
    ],
    "collectionURL": "https://kernel.org/",
    "defaultStatus": "unaffected"
  }
]