CVE-2024-53050

A flaw was found in the Linux kernel's Intel i915 graphics driver. A missing validation check on the display encoder within the High-bandwidth Digital Content Protection (HDCP) component allows a local authenticated attacker to trigger a null pointer dereference. This flaw can cause a kernel crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent loading of the i915 kernel module on systems where Intel graphics hardware is not required.

1. Create a configuration file named /etc/modprobe.d/blacklist-i915.conf with the following entries:

blacklist i915
install i915 /bin/true

Caveat: Disabling the i915 driver prevents hardware-accelerated graphics and display output on Intel graphics adapters, which will impact graphical desktop sessions. Headless servers or systems using non-Intel display adapters will not be impacted. A system restart is required if the module is already loaded in the running kernel.