CVE-2024-50214

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic()

modprobe drm_connector_test and then rmmod drm_connector_test,

the following memory leak occurs.

The `mode` allocated in drm_mode_duplicate() called by

drm_display_mode_from_cea_vic() is not freed, which cause the memory leak:

unreferenced object 0xffffff80cb0ee400 (size 128):

comm "kunit_try_catch", pid 1948, jiffies 4294950339

hex dump (first 32 bytes):

14 44 02 00 80 07 d8 07 04 08 98 08 00 00 38 04 .D............8.

3c 04 41 04 65 04 00 00 05 00 00 00 00 00 00 00 <.A.e...........

backtrace (crc 90e9585c):

[<00000000ec42e3d7>] kmemleak_alloc+0x34/0x40

[<00000000d0ef055a>] __kmalloc_cache_noprof+0x26c/0x2f4

[<00000000c2062161>] drm_mode_duplicate+0x44/0x19c

[<00000000f96c74aa>] drm_display_mode_from_cea_vic+0x88/0x98

[<00000000d8f2c8b4>] 0xffffffdc982a4868

[<000000005d164dbc>] kunit_try_run_c

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References