CVE Database›CVE-2024-35950

CVE-2024-35950

kernel: drm/client: Fully protect modes[] with dev->mode_config.mutex

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 20, 2024

Updated · October 30, 2026

Description

A flaw in the Linux kernel's Direct Rendering Manager (DRM) client could cause system instability. The problem occurs because the modes[] array, used to store display mode pointers, wasn’t adequately protected by a mutex lock. This allows the array to reference memory that has already been freed or reused, leading to potential crashes or unpredictable behavior.

Statement

Red Hat Enterprise Linux deployments are primarily impacted when local users or services interact with Direct Rendering Manager (DRM) display interfaces. This flaw is rated as Moderate severity because it requires local access and is limited in impact to system availability, resulting in a kernel crash rather than unauthorized privilege escalation. Headless server environments and systems without active display reconfiguration operations have significantly reduced exposure.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE not specified