In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Init `ddp_comp` with devm_kcalloc()
In the case where `conn_routes` is true we allocate an extra slot in the `ddp_comp` array but mtk_drm_crtc_create() never seemed to initialize it in the test case I ran. For me, this caused a later crash when we looped through the array in mtk_drm_crtc_mode_valid(). This showed up for me when I booted with `slub_debug=FZPUA` which poisons the memory initially. Without `slub_debug` I couldn't reproduce, presumably because the later code handles the value being NULL and in most cases (not guaranteed in all cases) the memory the allocator returned started out as 0.
It really doesn't hurt to initialize the array with devm_kcalloc() since the array is small and the overhead of initting a handful of elements to 0 is small. In general initting memory to zero is a safer practice and usually it's suggested to only use the non-initting alloc functions if you really need to.
Let's switch the function to use an allocation function that zeros the memory. For me, this avoids the crash.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-obs-build | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04 | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub