CVE-2024-26938

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26938
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of oopsing just bail early. We won't be able to tell whether the port is DP++ or not, but so be it. (cherry picked from commit 26410896206342c8a80d2b027923e9ee7d33b733)

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549 Patch
https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6 Patch
https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac Patch
https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f Patch
https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0 Patch
https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549 Patch
https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6 Patch
https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac Patch
https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f Patch
https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
History

18 Sep 2025, 14:15

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549 - () https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549 - Patch
References () https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6 - () https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6 - Patch
References () https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac - () https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac - Patch
References () https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f - () https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f - Patch
References () https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0 - () https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux

21 Nov 2024, 09:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() Si no tenemos VBT, o el VBT no declaró el codificador en cuestión, no tendremos los 'devdata' para el codificador. En lugar de huir, simplemente sal de la cárcel antes de tiempo. No podremos saber si el puerto es DP++ o no, pero que así sea. (cereza escogida del compromiso 26410896206342c8a80d2b027923e9ee7d33b733)
References () https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549 - () https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549 -
References () https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6 - () https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6 -
References () https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac - () https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac -
References () https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f - () https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f -
References () https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0 - () https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0 -

01 May 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 06:15

Updated : 2025-09-18 14:15

NVD link : CVE-2024-26938

Mitre link : CVE-2024-26938

CVE.ORG link : CVE-2024-26938

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo