CVE-2024-57799

phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM

Medium · published January 11, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM

In some cases, rk_hdptx_phy_runtime_resume() may be invoked before

platform_set_drvdata() is executed in ->probe(), leading to a NULL

pointer dereference when using the return of dev_get_drvdata().

Ensure platform_set_drvdata() is called before devm_pm_runtime_enable().

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Published
2025-01-11T12:39Z
EPSS history
Timeline
  • 11 JAN 12:39Z
    phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM
    cvelistv5