Riskcovery

CVE-2024-53056

drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

State
Published
Severity
5.5 Medium
Published
Nov 19, 2024
Updated
Oct 30, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

In mtk_crtc_create(), if the call to mbox_request_channel() fails then we set the "mtk_crtc->cmdq_client.chan" pointer to NULL. In that situation, we do not call cmdq_pkt_create().

During the cleanup, we need to check if the "mtk_crtc->cmdq_client.chan" is NULL first before calling cmdq_pkt_destroy(). Calling cmdq_pkt_destroy() is unnecessary if we didn't call cmdq_pkt_create() and it will result in a NULL pointer dereference.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to before 32ac6dccf561af97f20a3831430577d8a978e672Affected
  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to before fb05e973698f4af008c7fb6e0cfa6a2fa1d98409Affected
  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to before c60583a87cb4a85b69d1f448f0be5eb6ec62cbb2Affected
  • 7627122fd1c06800a1fe624e9fb3c269796115e8 to before 4018651ba5c409034149f297d3dd3328b91561fdAffected
  • 2c4396693698e876e559768d3d3a150c672ec384Affected
  • 5.15.54 to before 5.16Affected
LinuxLinux
  • 5.17Affected
  • before 5.17Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.11.7 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.