CVE-2024-22386: A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer…

PriorityP416medium4.7CVSS 3.1

AVLACHPRLUINSUCNINAH

EPSS

0.16%

5.5th percentile

A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.55-1 (bookworm)	linux 6.1.55-1 (bookworm)
linux	linux_kernel	<= 4.10.17	—
linux	linux_kernel	>= 0 < 5.10.197-1	5.10.197-1
linux	linux_kernel	>= 0 < 6.1.55-1	6.1.55-1
linux	linux_kernel	>= 0 < 6.5.6-1	6.5.6-1
linux	linux_kernel	>= 0 < 6.5.6-1	6.5.6-1
linux	linux_kernel	6.0 – 6.5.13	—
linux	linux_kernel	>= v4.11-rc1 < v6.6-rc1	v6.6-rc1

CVSS provenance

nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

osv4.7MEDIUM

vendor_debian5.3MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.