cbcvebase.
CVE-2024-57798
published 2025-01-11

CVE-2024-57798: In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While…

PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.21%
12.1th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While receiving an MST up request message from one thread in drm_dp_mst_handle_up_req(), the MST topology could be removed from another thread via drm_dp_mst_topology_mgr_set_mst(false), freeing mst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL. This could lead to a NULL deref/use-after-free of mst_primary in drm_dp_mst_handle_up_req(). Avoid the above by holding a reference for mst_primary in drm_dp_mst_handle_up_req() while it's used. v2: Fix kfreeing the request if getting an mst_primary reference fails.

Affected

25 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.123-1 (bookworm)linux 6.1.123-1 (bookworm)
debianlinux-6.1< linux 6.1.123-1 (bookworm)linux 6.1.123-1 (bookworm)
linuxlinux
linuxlinux>= 9408cc94eb041d0c2f9f00189a613b94c0449450 < f61b2e5e7821f868d6afc22382a66a30ee780ba0f61b2e5e7821f868d6afc22382a66a30ee780ba0
linuxlinux>= 9408cc94eb041d0c2f9f00189a613b94c0449450 < 9735d40f5fde9970aa46e828ecc85c32571d58a29735d40f5fde9970aa46e828ecc85c32571d58a2
linuxlinux>= 9408cc94eb041d0c2f9f00189a613b94c0449450 < ce55818b2d3a999f886af91679589e4644ff1dc8ce55818b2d3a999f886af91679589e4644ff1dc8
linuxlinux>= 9408cc94eb041d0c2f9f00189a613b94c0449450 < e54b00086f7473dbda1a7d6fc47720ced157c6a8e54b00086f7473dbda1a7d6fc47720ced157c6a8
linuxlinux_kernel< 6.1.1236.1.123
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.1.123-16.1.123-1
linuxlinux_kernel>= 0 < 6.12.8-16.12.8-1
linuxlinux_kernel>= 0 < 6.12.8-16.12.8-1
linuxlinux_kernel>= 0 < 5.15.0-136.1475.15.0-136.147
linuxlinux_kernel>= 0 < 6.8.0-57.596.8.0-57.59
linuxlinux_kernel>= 0 < 4.4.0-278.3124.4.0-278.312
linuxlinux_kernel>= 0 < 4.15.0-237.2494.15.0-237.249
linuxlinux_kernel>= 0 < 4.15.0-247.2594.15.0-247.259
linuxlinux_kernel>= 0 < 5.4.0-212.2325.4.0-212.232
linuxlinux_kernel>= 0 < 5.4.0-218.2385.4.0-218.238
linuxlinux_kernel>= 0 < 5.15.0-138.1485.15.0-138.148
linuxlinux_kernel>= 0 < 5.15.0-141.1515.15.0-141.151
linuxlinux_kernel>= 0 < 6.8.0-57.596.8.0-57.59
linuxlinux_kernel>= 0 < 6.8.0-59.616.8.0-59.61
linuxlinux_kernel>= 6.2 < 6.6.696.6.69
linuxlinux_kernel>= 6.7 < 6.12.86.12.8

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.