CVE-2024-50003 drm/amd/display: Fix system hang while resume with TBT monitor
A null pointer dereference in the Linux kernel AMD display driver causes a system hang during resume when a Thunderbolt monitor is connected.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50003?
CVE-2024-50003 is a medium-severity vulnerability in Linux kernel, published on 21 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix system hang while resume with TBT monitor
[Why] Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume.
The TBT monitor HPD will be triggered during the resume procedure and call the drm_client_modeset_probe() while struct drm_connector connector->dev->master is NULL.
It will mess up the pipe topology after resume.
[How] Skip the TBT monitor HPD during the resume procedure because we currently will probe the connectors after resume by default.
(cherry picked from commit 453f86a26945207a16b8f66aaed5962dc2b95b85)
Weakness: CWE-476
Which versions are affected by CVE-2024-50003?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50003?
Apply the vendor's patch.
Is CVE-2024-50003 being exploited?
There is no known exploitation of CVE-2024-50003 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-52114, BELL-CVE-2024-50003, DEBIAN-CVE-2024-50003, GHSA-3h7p-fxxx-92w8, ROOT-OS-DEBIAN-11-CVE-2024-50003, ROOT-OS-UBUNTU-2404-CVE-2024-50003 and 1 more.