CVE-2024-35799: linux-libc-dev - Prevent crash when disable stream
Summary
CVE-2024-35799: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent crash when disable stream [Why] Disabling stream encoder invokes a function that no longer exists. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling C programs that use the Linux kernel interfaces. It is an essential component for building and running applications on Linux systems. The vulnerability identified as CVE-2024-35799 affects the linux-libc-dev package, specifically in the drm/amd/display module of the Linux kernel. This module is responsible for managing display functionality on AMD graphics cards.
Vulnerability Detail
The vulnerability addressed in CVE-2024-35799 arises when attempting to disable a stream encoder in the drm/amd/display module. This action triggers a function that no longer exists, leading to a crash. The vulnerability is considered medium severity, with a CVSS score of 5.5. Exploiting this vulnerability could result in a denial of service (DoS) condition, impacting the stability and availability of the affected system. To mitigate the risk, it is crucial to apply the necessary fixes or workarounds.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability CVE-2024-35799 in the linux-libc-dev package's drm/amd/display module has been identified and addressed. It is crucial to update the package to version 6.1.90-1 or later to prevent the crash when disabling a stream encoder. No specific workaround has been mentioned for this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a development package that provides header files and libraries for compiling C programs using Linux kernel interfaces.
The drm/amd/display module is responsible for managing display functionality on AMD graphics cards.
Exploiting this vulnerability could lead to a denial of service (DoS) condition, affecting the stability and availability of the system.
The CVSS score of CVE-2024-35799 is 5.5, indicating a medium severity vulnerability.
To update the linux-libc-dev package, use the package manager of your Linux distribution and install version 6.1.90-1 or later.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
