CVE-2024-38390

drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails

published June 21, 2024

CVSS
—
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails

Calling a6xx_destroy() before adreno_gpu_init() leads to a null pointer

dereference on:

msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL);

as gpu->pdev is only assigned in:

a6xx_gpu_init()

|_ adreno_gpu_init

|_ msm_gpu_init()

Instead of relying on handwavy null checks down the cleanup chain,

explicitly de-allocate the LLC data and free a6xx_gpu instead.

Patchwork: https://patchwork.freedesktop.org/patch/588919/

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Published
2024-06-21T10:18Z
EPSS history
Timeline
  • 21 JUN 10:18Z
    drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
    cvelistv5