Critical Vulnerability in Linux Kernel: HDMI TX Clock Management Issue
Summary
DEBIAN-CVE-2024-35942: In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain According to i.MX8MP RM and HDMI ADD, the fdcc clock is part of hdmi rx verifica... Affects linux versions < 6.8.9-1. Fixed in 6.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the Debian operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of functionalities, including device management, memory management, and process scheduling. This vulnerability specifically affects the HDMI TX functionality, where improper clock management can lead to system errors and degraded performance.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of the fdcc clock within the HDMI TX power domain. This issue arises when the fdcc clock is disabled before the HDMI/LCDIF probe, resulting in the LCDIF not receiving the necessary pixel clock from the HDMI PHY. This can lead to significant error logs, including a vblank wait timeout warning, which indicates that the system is unable to synchronize display updates properly. The vulnerability is rooted in the incorrect configuration of power domains, which can adversely affect the display output and overall system stability.
How To Fix
Minimum fixed version
6.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually enable the fdcc clock before the HDMI/LCDIF probe to prevent the error logs from appearing. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The identified vulnerability in the Linux kernel regarding HDMI TX clock management poses significant risks to system stability and display functionality. Users are urged to update their systems to the latest patched version to mitigate these risks effectively. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities in open-source software.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper management of the fdcc clock in the HDMI TX power domain, leading to potential display errors.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Failure to address this vulnerability may result in display issues, system instability, and degraded performance during HDMI operations.
Yes, a patch is available in version 6.8.9-1 of the Linux package. Users should update to this version or later.
Yes, Vulert provides a way to monitor and alert for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
