CVE-2024-40926

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card doesn't have display hardware, hpd_work and hpd_lock are left uninitialized which causes BUG when attempting to schedule hpd_work on runtime PM resume. Fix it by adding headless flag to DRM and skip any hpd if it's set.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*

History

06 Mar 2025, 12:53

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/227349998e5740f14d531b0f0d704e66b1ed3c2f - () https://git.kernel.org/stable/c/227349998e5740f14d531b0f0d704e66b1ed3c2f - Patch
References () https://git.kernel.org/stable/c/b96a225377b6602299a03d2ce3c289b68cd41bb7 - () https://git.kernel.org/stable/c/b96a225377b6602299a03d2ce3c289b68cd41bb7 - Patch
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
CWE CWE-908

21 Nov 2024, 09:31

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/227349998e5740f14d531b0f0d704e66b1ed3c2f - () https://git.kernel.org/stable/c/227349998e5740f14d531b0f0d704e66b1ed3c2f -
References () https://git.kernel.org/stable/c/b96a225377b6602299a03d2ce3c289b68cd41bb7 - () https://git.kernel.org/stable/c/b96a225377b6602299a03d2ce3c289b68cd41bb7 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/nouveau: no intente programar hpd_work en tarjetas headless si la tarjeta no tiene hardware de visualización, hpd_work y hpd_lock quedan sin inicializar, lo que provoca un ERROR al intentar programar hpd_work en tiempo de ejecución, reanudación de PM. Solucionelo agregando una bandera sin cabeza a DRM y omita cualquier hpd si está configurado.

12 Jul 2024, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-12 13:15

Updated : 2025-03-06 12:53


NVD link : CVE-2024-40926

Mitre link : CVE-2024-40926

CVE.ORG link : CVE-2024-40926


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-908

Use of Uninitialized Resource