In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Init `ddp_comp` with devm_kcalloc()
In the case where `conn_routes` is true we allocate an extra slot in the `ddp_comp` array but mtk_drm_crtc_create() never seemed to initialize it in the test case I ran. For me, this caused a later crash when we looped through the array in mtk_drm_crtc_mode_valid(). This showed up for me when I booted with `slub_debug=FZPUA` which poisons the memory initially. Without `slub_debug` I couldn't reproduce, presumably because the later code handles the value being NULL and in most cases (not guaranteed in all cases) the memory the allocator returned started out as 0.
It really doesn't hurt to initialize the array with devm_kcalloc() since the array is small and the overhead of initting a handful of elements to 0 is small. In general initting memory to zero is a safer practice and usually it's suggested to only use the non-initting alloc functions if you really need to.
Let's switch the function to use an allocation function that zeros the memory. For me, this avoids the crash.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azure | Aug 9, 2024 | Jun 19, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub