In the Linux kernel, the following vulnerability has been resolved:
drm/meson: fix shutdown crash when component not probed
When main component is not probed, by example when the dw-hdmi module is not loaded yet or in probe defer, the following crash appears on shutdown:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000038 ... pc : meson_drv_shutdown+0x24/0x50 lr : platform_drv_shutdown+0x20/0x30 ... Call trace: meson_drv_shutdown+0x24/0x50 platform_drv_shutdown+0x20/0x30 device_shutdown+0x158/0x360 kernel_restart_prepare+0x38/0x48 kernel_restart+0x18/0x68 __do_sys_reboot+0x224/0x250 __arm64_sys_reboot+0x24/0x30 ...
Simply check if the priv struct has been allocated before using it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-preempt | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.4Upgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linuxUpgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-raspi-5.4Upgrade linux-aws-hweUpgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-bluefield | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub