CVE-2024-26938: Vulnerability in linux-libc-dev package - Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()
Summary
CVE-2024-26938: In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() If we have no VBT, or the VBT didn't declare the encoder in question... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling C programs against the Linux kernel. It is an essential component for building and running applications on Linux systems. This vulnerability affects the linux-libc-dev package version 6.1.90-1.
Vulnerability Detail
The vulnerability in the linux-libc-dev package arises from a flaw in the drm/i915/bios module. Specifically, the intel_bios_encoder_supports_dp_dual_mode() function does not handle the case when devdata is NULL. This can lead to a null pointer dereference and result in a system crash or other unexpected behavior. The issue has been addressed in the latest patch.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the patch provided by the package maintainers.
Conclusion
The linux-libc-dev package version 6.1.90-1 is affected by a vulnerability that can result in a system crash or other unexpected behavior. Users are advised to update their linux-libc-dev package to the latest version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling C programs against the Linux kernel.
This vulnerability can lead to a system crash or other unexpected behavior.
To fix this vulnerability, users should update their linux-libc-dev package to the latest version available.
There is no known workaround for this vulnerability. It is recommended to apply the patch provided by the package maintainers.
More information about this vulnerability can be found in the references provided.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
