CVE-2024-26909

A flaw was found in the Linux kernel's Qualcomm PMIC GLINK altmode driver. Under specific timing conditions during device probe deferrals, display bridge resources can be prematurely released while remaining referenced by other drivers, creating a use-after-free condition. A local user could trigger this vulnerability during display controller initialization, causing a system crash and resulting in a Denial of Service (DoS).

This vulnerability is evaluated as a Low severity issue for Red Hat because exploitation is restricted to specific Qualcomm hardware architectures and results exclusively in a local denial of service via system crash. The underlying race condition occurs solely during early boot probe deferrals when initializing DisplayPort alternate mode drivers on supported SoCs. Furthermore, Red Hat Enterprise Linux kernels do not enable or ship this hardware-specific driver, preventing impact on standard enterprise deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.