Riskcovery

CVE-2024-35952

drm/ast: Fix soft lockup

State
Published
Severity
Not scored
Published
May 20, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/ast: Fix soft lockup

There is a while-loop in ast_dp_set_on_off() that could lead to infinite-loop. This is because the register, VGACRI-Dx, checked in this API is a scratch register actually controlled by a MCU, named DPMCU, in BMC.

These scratch registers are protected by scu-lock. If suc-lock is not off, DPMCU can not update these registers and then host will have soft lockup due to never updated status.

DPMCU is used to control DP and relative registers to handshake with host's VGA driver. Even the most time-consuming task, DP's link training, is less than 100ms. 200ms should be enough.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 594e9c04b5864b4b8b151ef4ba9521c59e0f5c54 to before 8a6fea3fcb577a543ef67683ca7105bde49a38fbAffected
  • 594e9c04b5864b4b8b151ef4ba9521c59e0f5c54 to before a81b2acd43e24e419f65df97348c76a5a1496066Affected
  • 594e9c04b5864b4b8b151ef4ba9521c59e0f5c54 to before 35768baf0fdfc47ede42d899506bad78450e9294Affected
  • 594e9c04b5864b4b8b151ef4ba9521c59e0f5c54 to before bc004f5038220b1891ef4107134ccae44be55109Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.87 through 6.1.*Not affected
  • 6.6.28 through 6.6.*Not affected
  • 6.8.7 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.