Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-38390
HistoryJun 21, 2024 - 10:18 a.m.

CVE-2024-38390 drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails

2024-06-2110:18:13
Linux
github.com
2
linux kernel
vulnerability
nullptr dereference
speedbin setting
drm
msm
a6xx
adreno_gpu_init
cleanup
patchwork
freedesktop

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails

Calling a6xx_destroy() before adreno_gpu_init() leads to a null pointer
dereference on:

msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL);

as gpu->pdev is only assigned in:

a6xx_gpu_init()
|_ adreno_gpu_init
|_ msm_gpu_init()

Instead of relying on handwavy null checks down the cleanup chain,
explicitly de-allocate the LLC data and free a6xx_gpu instead.

Patchwork: https://patchwork.freedesktop.org/patch/588919/

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial