SB2024073197 - Improper error handling in Linux kernel drm lima driver
Published: July 31, 2024 Updated: May 12, 2025
Security Bulletin ID
SB2024073197
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper error handling (CVE-ID: CVE-2024-42127)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling within the lima_pp_init() and lima_pp_bcast_init() functions in drivers/gpu/drm/lima/lima_pp.c, within the lima_mmu_init() function in drivers/gpu/drm/lima/lima_mmu.c, within the lima_gp_init() function in drivers/gpu/drm/lima/lima_gp.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0d60c43df59ef01c08dc7b0c45495178f9d05a13
- https://git.kernel.org/stable/c/25d0d9b83d855cbc5d5aa5ae3cd79d55ea0c84a8
- https://git.kernel.org/stable/c/17fe8b75aaf0bb1bdc31368963446b421c22d0af
- https://git.kernel.org/stable/c/0a487e977cb8897ae4c51ecd34bbaa2b005266c9
- https://git.kernel.org/stable/c/04d531b9a1875846d4f89953b469ad463aa7a770
- https://git.kernel.org/stable/c/b5daf9217a50636a969bc1965f827878aeb09ffe
- https://git.kernel.org/stable/c/a6683c690bbfd1f371510cb051e8fa49507f3f5e
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.222
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.163
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.280
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.98
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.39