CVE-2024-35950
kernel: drm/client: Fully protect modes[] with dev->mode_config.mutex
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 20, 2024
Updated · October 30, 2026
Description
A flaw in the Linux kernel's Direct Rendering Manager (DRM) client could cause system instability. The problem occurs because the modes[] array, used to store display mode pointers, wasn’t adequately protected by a mutex lock. This allows the array to reference memory that has already been freed or reused, leading to potential crashes or unpredictable behavior.
Statement
Red Hat Enterprise Linux deployments are primarily impacted when local users or services interact with Direct Rendering Manager (DRM) display interfaces. This flaw is rated as Moderate severity because it requires local access and is limited in impact to system availability, resulting in a kernel crash rather than unauthorized privilege escalation. Headless server environments and systems without active display reconfiguration operations have significantly reduced exposure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE not specified