Memory Leak Vulnerability in Linux Kernel's HDMI Driver - CVE-2024-50213
Summary
DEBIAN-CVE-2024-50213: In the Linux kernel, the following vulnerability has been resolved: drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() modprobe drm_hdmi_state_helper_test and then rmmod it, the following memory leak oc... Affects linux versions < 6.11.7-1. Fixed in 6.11.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of functionalities, including device drivers, file systems, and network protocols. The HDMI driver within the kernel facilitates communication between the operating system and HDMI devices, ensuring proper display and audio output. This vulnerability specifically affects the HDMI driver, leading to potential memory leaks during operation.
Vulnerability Detail
In the Linux kernel, a memory leak has been identified in the HDMI driver, specifically in the function drm_display_mode_from_cea_vic(). When the modprobe command is used to load the drm_hdmi_state_helper_test module and subsequently removed with rmmod, a memory leak occurs due to the failure to free the 'mode' object allocated in drm_mode_duplicate(). This leak can lead to increased memory consumption, potentially affecting system performance and stability over time.
How To Fix
Minimum fixed version
6.11.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to prevent potential memory leaks.
Conclusion
The CVE-2024-50213 vulnerability in the Linux kernel's HDMI driver poses a risk of memory leaks that can affect system performance. It is crucial to update to the patched version 6.11.7-1 to mitigate this issue. Users are encouraged to utilize tools like Vulert to stay informed about vulnerabilities in their software.
See every vulnerability recorded for linux →
FAQ
CVE-2024-50213 is a vulnerability in the Linux kernel's HDMI driver that causes memory leaks when certain modules are loaded and unloaded.
This vulnerability can lead to increased memory usage, which may degrade system performance and stability over time.
Yes, a patch is available in version 6.11.7-1 of the Linux package for Debian 13 and 14.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. You can check your application against this vulnerability using the Vulert playground without any signup.
While there are no specific workarounds, it is advisable to monitor your system's memory usage and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
