CVE-2024-35952

CVE-2024-35952 describes an issue in the Linux kernel's AST graphics driver. The problem occurs in the ast_dp_set_on_off() function, where a lack of proper synchronization with the DisplayPort Microcontroller Unit (DPMCU) can result in an infinite loop. This can cause a "soft lockup" in the host system, impacting its availability.

This vulnerability is rated with a Moderate severity because it requires local access on systems equipped with specific ASPEED graphics hardware and primarily results in a denial of service. The issue stems from an unbounded loop during DisplayPort microcontroller synchronization, which triggers a host kernel soft lockup. Exploitation does not allow privilege escalation or compromise data confidentiality or integrity, confining the blast radius to system unresponsiveness on physical hosts using the affected display controller.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.