drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.3%
exploitation probability
0.3%top 81% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
BUG: Unable to handle kernel paging request at virtual address 006b6b6b6b6b6be3
Call trace:
dpu_vbif_init_memtypes+0x40/0xb8
dpu_runtime_resume+0xcc/0x1c0
pm_generic_runtime_resume+0x30/0x44
__genpd_runtime_resume+0x68/0x7c
genpd_runtime_resume+0x134/0x258
__rpm_callback+0x98/0x138
rpm_callback+0x30/0x88
rpm_resume+0x36c/0x49c
__pm_runtime_resume+0x80/0xb0
dpu_core_irq_uninstall+0x30/0xb0
dpu_irq_uninstall+0x18/0x24
msm_drm_uninit+0xd8/0x16c
Patchwork: https://patchwork.freedesktop.org/patch/483255/
[DB: fixed Fixes tag]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/134760263f6441741db0b2970e7face6b34b6d1chttps://git.kernel.org/stable/c/5b0adf5cbf3b74721e4e4c4e0cadc91b8df8bcc2https://git.kernel.org/stable/c/97ac682b6f7d36be5d934f86c9911066540a68f1https://git.kernel.org/stable/c/aa4cb188988dc6f1b3f4917d4dbc452150a5d871https://git.kernel.org/stable/c/ef10d0c68e8608848cd58fca2589685718426607https://git.kernel.org/stable/c/ef4bdaac7cb5416f236613ed9337ff0ea8ee329bhttps://git.kernel.org/stable/c/fa5186b279ecf44b14fb435540d2065be91cb1ed