NetSight
IP …
high7.8

CVE-2024-35950

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains po…

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains pointers to modes on the connectors' mode lists, which are protected by dev->mode_config.mutex. Thus we need to extend modes[] the same protection or by the time we use it the elements may already be pointing to freed/reused memory.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.275
from 5.5 before 5.10.216
from 5.11 before 5.15.156
from 5.16 before 6.1.87
from 6.2 before 6.6.28
from 6.7 before 6.8.7
DebianDebian Linux
Version 10.0

References