CVE-2024-53056
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2024-11-19
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() In mtk_crtc_create(), if the call to mbox_request_channel() fails then we set the "mtk_crtc->cmdq_client.chan" pointer to NULL. In that situation, we do not call cmdq_pkt_create(). During the cleanup, we need to check if the "mtk_crtc->cmdq_client.chan" is NULL first before calling cmdq_pkt_destroy(). Calling cmdq_pkt_destroy() is unnecessary if we didn't call cmdq_pkt_create() and it will result in a NULL pointer dereference.
Weakness Classification (1)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 7627122fd1c06800a1fe624e9fb3c269796115e8 < 32ac6dccf561af97f20a3831430577d8a978e672 |
| Linux | Linux | 7627122fd1c06800a1fe624e9fb3c269796115e8 < fb05e973698f4af008c7fb6e0cfa6a2fa1d98409 |
| Linux | Linux | 7627122fd1c06800a1fe624e9fb3c269796115e8 < c60583a87cb4a85b69d1f448f0be5eb6ec62cbb2 |
| Linux | Linux | 7627122fd1c06800a1fe624e9fb3c269796115e8 < 4018651ba5c409034149f297d3dd3328b91561fd |
| Linux | Linux | 2c4396693698e876e559768d3d3a150c672ec384 |
| Linux | Linux | 5.15.54 < 5.16 |
| Linux | Linux | 5.17 |
| linux | linux_kernel | 5.17 – 6.11.7 |
| linux | linux_kernel | 6.12 |
| linux | linux_kernel | 6.12 |
| linux | linux_kernel | 6.12 |
| linux | linux_kernel | 6.12 |
| linux | linux_kernel | 6.12 |