CVE-2024-26938
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for…
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of oopsing just bail early. We won't be able to tell whether the port is DP++ or not, but so be it. (cherry picked from commit 26410896206342c8a80d2b027923e9ee7d33b733)
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.22% probability · 13th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549Patch
- https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82acPatch
- https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1fPatch
- https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0Patch
- https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549Patch
- https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6Patch
- https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82acPatch
- https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1fPatch
- https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.