Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40926
HistoryJul 12, 2024 - 12:25 p.m.

CVE-2024-40926 drm/nouveau: don't attempt to schedule hpd_work on headless cards

2024-07-1212:25:06
Linux
github.com
2
linux kernel
drm/nouveau
vulnerability
headless cards
display hardware
hpd_work

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau: don’t attempt to schedule hpd_work on headless cards

If the card doesn’t have display hardware, hpd_work and hpd_lock are
left uninitialized which causes BUG when attempting to schedule hpd_work
on runtime PM resume.

Fix it by adding headless flag to DRM and skip any hpd if it’s set.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial