CVE-2024-26876 drm/bridge: adv7511: fix crash on irq during probe
A race condition in the Linux kernel's adv7511 driver causes a crash when an IRQ occurs during probe, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-26876?
CVE-2024-26876 is a medium-severity vulnerability in Linux kernel, published on 17 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: adv7511: fix crash on irq during probe
Moved IRQ registration down to end of adv7511_probe().
If an IRQ already is pending during adv7511_probe (before adv7511_cec_init) then cec_received_msg_ts could crash using uninitialized data:
Unable to handle kernel read from unreadable memory at virtual address 00000000000003d5 Internal error: Oops: 96000004 [#1] PREEMPT_RT SMP Call trace: cec_received_msg_ts+0x48/0x990 [cec] adv7511_cec_irq_process+0x1cc/0x308 [adv7511] adv7511_irq_process+0xd8/0x120 [adv7511] adv7511_irq_handler+0x1c/0x30 [adv7511] irq_thread_fn+0x30/0xa0 irq_thread+0x14c/0x238 kthread+0x190/0x1a8
Weakness: CWE-908
Which versions are affected by CVE-2024-26876?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-26876?
Apply the vendor's patch.
Is CVE-2024-26876 being exploited?
There is no known exploitation of CVE-2024-26876 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-57725, BELL-CVE-2024-26876, DEBIAN-CVE-2024-26876, GHSA-7q77-pgmv-vv9r, ROOT-OS-DEBIAN-11-CVE-2024-26876, ROOT-OS-DEBIAN-12-CVE-2024-26876 and 2 more.