CVE-2024-35942

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2024-05-19 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain According to i.MX8MP RM and HDMI ADD, the fdcc clock is part of hdmi rx verification IP that should not enable for HDMI TX. But actually if the clock is disabled before HDMI/LCDIF probe, LCDIF will not get pixel clock from HDMI PHY and print the error logs: [CRTC:39:crtc-2] vblank wait timed out WARNING: CPU: 2 PID: 9 at drivers/gpu/drm/drm_atomic_helper.c:1634 drm_atomic_helper_wait_for_vblanks.part.0+0x23c/0x260 Add fdcc clock to LCDIF and HDMI TX power domains to fix the issue.

Affected Software (6)

VendorProductVersion
Linux Linux 556f5cf9568af772d494cff24ffaa7ea41e1ab40 < 7c280b5fa64fe78a1a1d198b44a2d90bda36ed65
Linux Linux 556f5cf9568af772d494cff24ffaa7ea41e1ab40 < 9d3f959b426635c4da50dfc7b1306afd84d23e7c
Linux Linux 556f5cf9568af772d494cff24ffaa7ea41e1ab40 < b13c0d871cd878ff53d25507ca535f59ed1f6a2a
Linux Linux 556f5cf9568af772d494cff24ffaa7ea41e1ab40 < 697624ee8ad557ab5417f985d2c804241a7ad30d
Linux Linux 5.19
linux linux_kernel 5.19 – 6.6.27

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.21%
Raw Score 0.002110
Percentile 11.5%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00211
2026-10-29
0.00211

Intelligence Sources

mitre ref →
nvd ref →