CVE-2024-50173

drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()

State: Published
Severity: 7.8 High
Published: Nov 8, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()

The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated list_head, not a valid group. Get the ptdev object from the scheduler instead.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-908 Use of Uninitialized Resource

Affected Products

Product	Versions
LinuxLinux	d72f049087d4f973f6332b599c92177e718107de to before ac2ca5e5148a0d4d78ac01c2d8348d0757c7367fAffected d72f049087d4f973f6332b599c92177e718107de to before 3bde05794497d5f426d4ea2ecb9868bf7721fb24Affected d72f049087d4f973f6332b599c92177e718107de to before 282864cc5d3f144af0cdea1868ee2dc2c5110f0dAffected
LinuxLinux	6.10Affected before 6.10Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.