CVE-2024-58074

CVE-2024-58074

Medium · published March 6, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Grab intel_display from the encoder to avoid potential oopsies

Grab the intel_display from 'encoder' rather than 'state'

in the encoder hooks to avoid the massive footgun that is

intel_sanitize_encoder(), which passes NULL as the 'state'

argument to encoder .disable() and .post_disable().

TODO: figure out how to actually fix intel_sanitize_encoder()...

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00178 · 7.1th percentile
Published
2025-03-06T21:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.12, < 6.13.26.13.2
References (3)
EPSS history
Timeline
  • 06 MAR 16:04Z
    drm/i915: Grab intel_display from the encoder to avoid potential oopsies
    cvelistv5