CVE-2024-35952

drm/ast: Fix soft lockup

published May 20, 2024

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/ast: Fix soft lockup

There is a while-loop in ast_dp_set_on_off() that could lead to

infinite-loop. This is because the register, VGACRI-Dx, checked in

this API is a scratch register actually controlled by a MCU, named

DPMCU, in BMC.

These scratch registers are protected by scu-lock. If suc-lock is not

off, DPMCU can not update these registers and then host will have soft

lockup due to never updated status.

DPMCU is used to control DP and relative registers to handshake with

host's VGA driver. Even the most time-consuming task, DP's link

training, is less than 100ms. 200ms should be enough.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2024-05-20T09:41Z
EPSS history
Timeline
  • 20 MAY 09:41Z
    drm/ast: Fix soft lockup
    cvelistv5