CVE-2024-57926
kernel: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 19, 2025
Updated · September 13, 2026
Description
A flaw was found in the Linux kernel's drm/mediatek component. When the mtk_drm_bind function returns an error, a pointer is not properly nulled, leading to a use-after-free vulnerability. A local attacker could exploit this by triggering a specific error condition during device shutdown, potentially causing a system crash (denial of service) or leading to privilege escalation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 · Use After Free